CVE-2021-32608

概要

参考情報

• blog.sonarsource.com/smartstorenet-malicious-message-leading-to-e-commerce-takeover · Exploit
• smartstore/SmartStoreNET commit ae03d45 · Patch

smartstore のその他の脆弱性

• CVE-2021-32607緊急 9.8An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeH…
• CVE-2020-15243緊急 9.8Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0…