PT-2020-17041
CVE-2020-28838
·
تاريخ النشر
2020-12-11
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Opencart CMS version 3.0.3.6
Description
The issue allows an attacker to perform a Cross Site Request Forgery (CSRF) attack in the CART option, enabling them to add cart items via the 'Add to cart' function.
Recommendations
For Opencart CMS version 3.0.3.6, consider implementing proper CSRF token validation to prevent unauthorized requests, and restrict access to the 'Add to cart' function until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾