CVE-2023-45384

Summary

CVE-2023-45384 is a vulnerability affecting the KnowBand supercheckout module version 5.0.7 and earlier (up to 6.0.7) used in Magento e-commerce platforms. This issue enables unauthenticated users to upload malicious files, specifically those with the .php extension, in the "Module One Page Checkout, Social Login & Mailchimp" functionality. By exploiting this weakness, attackers can potentially gain unauthorized access to the server or execute arbitrary code, posing a serious security threat to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.