Lucene search
HistoryNov 17, 2023 - 5:15 a.m.
CVE-2023-38130
cve-2023-38130
cross-site request forgery
csrf
cubecart
vulnerability
data deletion.
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
8.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.5%
Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system.
Affected configurations
Node
cubecart_limitedcubecartRange<6.5.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| cubecart:cubecart | cubecart | lt | 6.5.3 |
CNA Affected
[
{
"vendor": "CubeCart Limited",
"product": "CubeCart",
"versions": [
{
"version": "prior to 6.5.3",
"status": "affected"
}
]
}
]Related
cvelist
cvelist
CVE-2023-38130
2023-11-17 04:37:02
prion
prion
Cross site request forgery (csrf)
2023-11-17 05:15:00
nvd
nvd
CVE-2023-38130
2023-11-17 05:15:12
jvn
jvn
JVN#22220399: Multiple vulnerabilities in CubeCart
2023-11-17 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
8.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.5%
Related for CVE-2023-38130