Vulnerabilities

TI-2023-02541 CVE-2023-2713 · GHSA-qmfj-76r4-vwg3

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

MEDIUM 50

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2023-05-20 Fixed in 23.05.15 CWE-639

TI-2023-02540 CVE-2023-2712 · GHSA-pwgq-6599-qfpv

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

MEDIUM 51

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Se…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01294 Published 2023-05-20 Fixed in 23.05.15 CWE-434

Vulnerabilities

Filters

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.