CVE-2018-13067

2018-07-0217:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.0%

JSON

/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user’s password.

CPENameOperatorVersion
opencarteq2.0.1.1
opencarteq2.0.2.0
opencarteq2.3.0.0
opencarteq3.0.1.1
opencarteq3.0.1.2
opencarteq3.0.2.0
opencarteq2.1.0.0
opencarteq2.2.0.0
opencarteq3.0.0.0
opencarteq2.3.0.2

Name	Operator	Version
opencart	eq	2.0.1.1
opencart	eq	2.0.2.0
opencart	eq	2.3.0.0
opencart	eq	3.0.1.1
opencart	eq	3.0.1.2
opencart	eq	3.0.2.0
opencart	eq	2.1.0.0
opencart	eq	2.2.0.0
opencart	eq	3.0.0.0
opencart	eq	2.3.0.2