CVE-2024-21514
1 advisory.
Packagist/opencart/opencart CVE-2024-21514: high 7.4, EPSS 19.08%
SQL injection in opencart
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.3.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7crj-24g3-g7h7
- https://nvd.nist.gov/vuln/detail/CVE-2024-21514
- https://github.com/opencart/opencart/commit/46bd5f5a8056ff9aad0aa7d71729c4cf593d67e2
- https://github.com/opencart/opencart
- https://github.com/opencart/opencart/blob/3.0.3.9/upload/catalog/model/extension/payment/divido.php%23L114
- https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266565
CVE-2024-21514 · published · modified · JSON