Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-2315

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

Description

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Opencart Opencart

Default version status: unaffected

  • 4.0.0.0 to ≤ 4.0.2.2affected

References