Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2
CVE-2023-2315
8.1HIGH
Summary
OpenCart versions 4.0.0.0 to 4.0.2.2 are susceptible to a path traversal vulnerability that allows an authenticated user with access to the Log component to manipulate server files. This flaw can lead to the arbitrary modification or deletion of files, compromising the integrity and security of the server environment. Mitigation measures should be applied by updating to the patched version to prevent potential exploitation.
Affected Version(s)
Opencart 4.0.0.0 <= 4.0.2.2
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Poh Jia Hao (@Chocologicall) of STAR Labs SG Pte. Ltd. (@starlabs_sg)