Access Control Weakness in PuneethReddyHC Online Shopping System
CVE-2021-43110

9.8CRITICAL

Key Information:

Vendor: Puneethreddyhc Online-shopping-system Project
Status: Puneethreddyhc Online-shopping-system
Vendor: CVE Published:; 29 March 2022

🔔 Create Puneethreddyhc Online-shopping-system Project Vulnerability Alert

What is CVE-2021-43110?

An Access Control vulnerability has been identified in PuneethReddyHC's online shopping system, specifically within the 'add_products' functionality. This security flaw could potentially allow unauthorized users to manipulate product additions, leading to a risk of unauthorized access and potential data breaches. Developers and administrators are advised to implement necessary security measures and updates to mitigate this risk. Full details on the issue can be found at the GitHub repository.

References

https://github.com/PuneethReddyHC/online-shopping-system/...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 29, 2022
Vulnerability Reserved
Nov 1, 2021

JSON