Packagist/opencart/opencart CVE-2024-21519: medium 6.6, EPSS 0.72%
Arbitrary File Creation in opencart
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7q3h-j95q-3vjh
- https://nvd.nist.gov/vuln/detail/CVE-2024-21519
- https://github.com/opencart/opencart
- https://github.com/opencart/opencart/blob/4.0.2.3/upload/admin/controller/tool/upload.php%23L353
- https://github.com/opencart/opencart/blob/master/upload/admin/controller/tool/upload.php%23L353
- https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266579
CVE-2024-21519 · published · modified · JSON