CVE-2023-46942

Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints...

CVE-2023-46942

Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints...

CVE-2023-46942

CVE-2023-46942 affects the Node package @evershop/evershop, with versions prior to 1.0.0-rc.8. The root cause is a lack of authentication leading to improper authorization on GraphQL endpoints, allowing remote attackers to obtain sensitive information. The CVSS vector from NVD/CNA indicates a hig...