2 matches found
GHSA-PGJ4-G5J4-CMFX Withdrawn Advisory: cart2quote/module-quotation-encoded Remote Code Execution via downloadCustomOptionAction
Withdrawn Advisory This advisory has been withdrawn because it is specific to the Magento 1 implementation of cart2quote and does not apply to cart2quote/module-quotation-encoded. Original Description cart2quote/module-quotation-encoded extension may expose a critical security vulnerability by...
PT-2024-40399
Name of the Vulnerable Software and Affected Versions cart2quote/module-quotation-encoded extension affected versions not specified Description The issue is related to the utilization of the unserialize function when processing data from a GET request, posing a significant risk of Remote Code...