CVE-2024-21515

Summary

CVE-2024-21515 is a reflected XSS vulnerability affecting versions 4.0.0.0 and above of the opencart/opencart package. The issue lies in the filename parameter of the admin tool/log route, which could allow an attacker to obtain a user's token by tricking them into clicking a maliciously crafted URL. Upon successful login, the user would be redirected to the attacker's payload. If the targeted user holds admin privileges, this vulnerability could serve as the entry point for a sequence of further attacks, such as Zip Slip or arbitrary file writes. However, it's essential to note that for an attacker to exploit this vulnerability, they must be aware of the name or path of the admin directory, which is typically "admin" but is warned against in the dashboard. The current patch only removes the redirect, making it impossible for an attacker to control the post-authentication redirection. Nevertheless, this vulnerability can still be exploited against authenticated admin users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.