CVE-2024-0412

Published: Jan 11, 2024Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250432.

Affected (2)

Products: Csdeshang: Dsshop

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Csdeshang Dsshop	Version 3.0
Csdeshang Dsshop	Version 3.1.0

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (6)

https://note.zhaoj.in/share/Q56cf5nN9RzF

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.250432

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.250432

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://note.zhaoj.in/share/Q56cf5nN9RzF

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://vuldb.com/?ctiid.250432

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.250432

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

Timeline

No history available yet.