Kerawen

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kerawen records in CISA KEV

No Kerawen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kerawen 1 record MEDIUM Omnichannel Stocks 1 record MEDIUM

Records

2 records

TI-2023-12444 CVE-2023-27845 · GHSA-4c3f-2c97-5p6f

SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a…

MEDIUM 51

SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01038 Published 2023-07-07 No fix listed CWE-89

TI-2023-21614 CVE-2023-40922 · GHSA-m856-3g3x-c3p9

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 50

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2023-11-04 No fix listed CWE-89

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0