CVE-2023-42428

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.

Score

CVSS 3.1 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2023-11-17

Last modified

2024-08-02

Weaknesses

CWE-22

Affected products

• Cubecart (Cubecart)
• Cubecart (Cubecart Limited)

References

• https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
• https://jvn.jp/en/jp/JVN22220399/