~ / search / GHSA-3j6m-m5v5-9785

GHSA-3j6m-m5v5-9785

OpenCart Cross-Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) Low CVE-2020-28838

Packages

EcosystemPackageAffectedFixed in
Packagist opencart/opencart 3.0.3.6 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.

References

External links from the advisory. They lead to third-party sites.