CVE-2023-45384

2023-10-1900:00:00

mitre

github.com

knowband supercheckout

vulnerability

unrestricted upload

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

43.8%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module “Module One Page Checkout, Social Login & Mailchimp” (supercheckout), a guest can upload files with extensions .php

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:knownband:supercheckout:*:*:*:*:*:*:*:*"
    ],
    "vendor": "knownband",
    "product": "supercheckout",
    "versions": [
      {
        "status": "affected",
        "version": "5.07",
        "lessThan": "6.07",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]