CVE-2024-21515
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Summary
CVE-2024-21515 is a reflected XSS vulnerability affecting versions 4.0.0.0 and above of the opencart/opencart package. The issue lies in the filename parameter of the admin tool/log route, which could allow an attacker to obtain a user's token by tricking them into clicking a maliciously crafted URL. Upon successful login, the user would be redirected to the attacker's payload. If the targeted user holds admin privileges, this vulnerability could serve as the entry point for a sequence of further attacks, such as Zip Slip or arbitrary file writes. However, it's essential to note that for an attacker to exploit this vulnerability, they must be aware of the name or path of the admin directory, which is typically "admin" but is warned against in the dashboard. The current patch only removes the redirect, making it impossible for an attacker to control the post-authentication redirection. Nevertheless, this vulnerability can still be exploited against authenticated admin users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- OpenCart
Affected Vendors
- Opencart
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions