Kerawen

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kerawen records in CISA KEV

No Kerawen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kerawen 1 record MEDIUM Omnichannel Stocks 1 record MEDIUM

Records

1 record in Kerawen · all components

TI-2023-21614 CVE-2023-40922 · GHSA-m856-3g3x-c3p9

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 50

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2023-11-04 No fix listed CWE-89

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0