CVE-2021-32607

概要

参考情報

• blog.sonarsource.com/smartstorenet-malicious-message-leading-to-e-commerce-takeover · Exploit
• smartstore/SmartStoreNET commit 5b4e60a · Patch

smartstore のその他の脆弱性

• CVE-2021-32608緊急 9.8An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does not call HtmlUtils.San…
• CVE-2020-15243緊急 9.8Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0…