Lucene search

K
osvGoogleOSV:GHSA-HR89-W7P6-PJMQ
HistoryMay 13, 2022 - 1:49 a.m.

express-cart allows any user to create an admin user

2022-05-1301:49:36
Google
osv.dev
4
express-cart
vulnerability
remote attackers
admin user
software

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

72.4%

Express-Cart before 1.1.6 allows remote attackers to create an admin user via an /admin/setup Referer header.

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

72.4%

Related for OSV:GHSA-HR89-W7P6-PJMQ