Rental Module Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rental Module Project records in CISA KEV

No Rental Module Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rental Module 2 records MEDIUM

Records

2 records

TI-2023-02540 CVE-2023-2712 · GHSA-pwgq-6599-qfpv

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

MEDIUM 51

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Se…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01294 Published 2023-05-20 Fixed in 23.05.15 CWE-434

TI-2023-02541 CVE-2023-2713 · GHSA-qmfj-76r4-vwg3

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

MEDIUM 50

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2023-05-20 Fixed in 23.05.15 CWE-639

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0