Lucene search
+L

4 matches found

OSV
OSV
added 2023/12/08 9:30 p.m.53 views

GHSA-5MMR-9QX3-3PF9 Code execution in evershop

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

9.8CVSS9.6AI score0.01285EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2023/12/08 8:15 p.m.4 views

CVE-2023-46498

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

9.8CVSS6.1AI score0.01285EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/08 8:15 p.m.14 views

CVE-2023-46498

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

9.8CVSS6.1AI score0.01285EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/08 12:0 a.m.7 views

EverShop Security Breach

EverShop is EverShop open source a NodeJS e-commerce platform. A security vulnerability exists in EverShop versions prior to v.1.0.0-rc.8. A remote attacker can use this vulnerability to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

9.8CVSS7.4AI score0.01285EPSS
SaveExploits0References3
Rows per page
Query Builder