PT-2023-31818 · Unknown · Verge3D E-Commerce+1

Rafie Muhammad

·

CVE-2023-51420

·

Publicado

2023-12-29

·

Atualizado

2024-01-05

CVSS v3.1

9.1

Crítica

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Verge3D Publishing and E-Commerce versions n/a through 4.5.2
Description The issue is related to an Improper Control of Generation of Code ('Code Injection') vulnerability. This vulnerability affects Verge3D Publishing and E-Commerce.
Recommendations For versions n/a through 4.5.2, update to a version later than 4.5.2 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2023-51420

Produtos afetados

Verge3D E-Commerce
Verge3D Publishing