En resumen
- CVE-2020-22403 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a express-cart (express-cart project), express-cart.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.57%, mayor que el 47.0% de las vulnerabilidades.
- Solución: actualizar a 1.1.17 o posterior.
Description
The express-cart package through 1.1.10 for Node.js allows CSRF.
NVD description
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free