Lucene search

SnykCVE-2024-21518

HistoryJun 22, 2024 - 5:15 a.m.

CVE-2024-21518

2024-06-2205:15:11

CWE-290

CWE-29

CWE-22

snyk

web.nvd.nist.gov

opencart

zip slip

vulnerability

filesystem traversal

web root

arbitrary files

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.6%

JSON

This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization of the target path, allowing files within a malicious archive to traverse the filesystem and be extracted to arbitrary locations. An attacker can create arbitrary files in the web root of the application and overwrite other existing files by exploiting this vulnerability.

Affected configurations

Nvd

Node

opencartopencartRange4.0.0.0≥

VendorProductVersionCPE
opencartopencart*cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opencart	opencart	*	cpe:2.3:a:opencart:opencart::::::::

CNA Affected

[
  {
    "product": "opencart/opencart",
    "versions": [
      {
        "version": "4.0.0.0",
        "lessThan": "*",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

References

github.com/opencart/opencart/blob/04c1724370ab02967d3b4f668c1b67771ecf1ff4/upload/admin/controller/marketplace/installer.php%23L383C1-L383C1

security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266578

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.6%

JSON

Related for CVE-2024-21518