CVE-2023-46498

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

CVE-2023-46498

CVE-2023-46498 affects EverShop NPM versions prior to 1.0.0-rc.8. The vulnerability exists in the /deleteCustomer/route.json API endpoint, enabling a remote attacker to obtain sensitive information and execute arbitrary code. The root cause is tied to this endpoint’s handling, as described in mul...