CVE-2024-21518
1 advisory.
Packagist/opencart/opencart CVE-2024-21518: high 7.2, EPSS 14.13%
Zip slip in opencart
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m7r8-2r98-vppj
- https://nvd.nist.gov/vuln/detail/CVE-2024-21518
- https://github.com/opencart/opencart
- https://github.com/opencart/opencart/blob/04c1724370ab02967d3b4f668c1b67771ecf1ff4/upload/admin/controller/marketplace/installer.php%23L383C1-L383C1
- https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266578
CVE-2024-21518 · published · modified · JSON