Remote Attackers Can Access Sensitive Information through Directory Traversal Vulnerability in PDF Add-on
CVE-2023-26687

Currently unrated

Key Information:

Vendor

CS-Cart

Status
Cs-cart Multivendor
Vendor
CVE Published:
25 September 2024

What is CVE-2023-26687?

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on.

References

https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-266...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.