PT-2017-15207
CVE-2017-2143
·
تاريخ النشر
2017-04-28
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier
CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier
Description
The issue allows remote attackers to bypass access restrictions and create a request to return a customer-purchased item. This is achieved via the "rma.post.php" endpoint.
Recommendations
For CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier, consider restricting access to the "rma.post.php" endpoint until a fix is available.
For CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier, consider restricting access to the "rma.post.php" endpoint until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾