Lucene search
Veracode Vulnerability DatabaseVERACODE:47051HistoryMay 20, 2024 - 7:39 a.m.
Remote Code Execution (RCE)
2024-05-2007:39:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
remote code execution
unserialize function
get request
arbitrary code
custom file options
product security
AI Score
8.6
Confidence
High
cart2quote/module-quotation-encoded is vulnerable to Remote Code Execution (RCE). The vulnerability is due to the use of the unserialize function when processing data from a GET request, which can be exploited by attackers to execute arbitrary code remotely, particularly when custom file options are used on a product.
AI Score
8.6
Confidence
High