CVE-2023-46498

Published: Dec 8, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file.

Affected (12)

Products: Evershop: Evershop

Evershop

1 product

Evershop

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Evershop Evershop	Version 1.0.0 beta1
Evershop Evershop	Version 1.0.0 beta2
Evershop Evershop	Version 1.0.0 beta3
Evershop Evershop	Version 1.0.0 beta4
Evershop Evershop	Version 1.0.0 beta5
Evershop Evershop	Version 1.0.0 beta
Evershop Evershop	Version 1.0.0 rc1
Evershop Evershop	Version 1.0.0 rc2
Evershop Evershop	Version 1.0.0 rc3
Evershop Evershop	Version 1.0.0 rc5
Evershop Evershop	Version 1.0.0 rc6
Evershop Evershop	Version 1.0.0 rc7

References (4)

https://devhub.checkmarx.com/cve-details/Cx8b24ace3-0c9a/

Source: cve@mitre.org

Not Applicable

https://devhub.checkmarx.com/cve-details/cve-2023-46498/

Source: cve@mitre.org

Third Party Advisory

https://devhub.checkmarx.com/cve-details/Cx8b24ace3-0c9a/

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

https://devhub.checkmarx.com/cve-details/cve-2023-46498/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.