Vulnerability Description
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Express-Cart Project | Express-Cart | <= 1.1.10 |
Related Weaknesses (CWE)
References
- https://github.com/mrvautin/expressCart/issues/120
- https://github.com/mrvautin/expressCart/issues/120
FAQ
What is CVE-2020-22403?
CVE-2020-22403 is a vulnerability with a CVSS score of 8.8 (HIGH). Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
How severe is CVE-2020-22403?
CVE-2020-22403 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-22403?
Check the references section above for vendor advisories and patch information. Affected products include: Express-Cart Project Express-Cart.