PT-2024-24231
CVE-2024-31823
·
تاريخ النشر
2024-04-29
·
تاريخ التحديث
2026-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Ecommerce-CodeIgniter-Bootstrap version d22b54e8915f167a135046ceb857caaf8479c4da
Description
The issue allows a remote attacker to execute arbitrary code via the
removeSecondaryImage method of the Publish.php component. This enables the attacker to perform unauthorized actions on the system.Recommendations
For version d22b54e8915f167a135046ceb857caaf8479c4da, consider disabling the
removeSecondaryImage method of the Publish.php component as a temporary workaround until a patch is available. Restrict access to the Publish.php component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾