VulnerabilityModified

CVE-2014-3990

The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) attacks or possibly conduct XML External Entity (XXE) attacks and execute arbitrary code via a…

CRITICAL 9.8EPSS 6.60%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (6.60%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 6.60% probability · 93th percentile
CISA KEV: Not listed
Weakness: CWE-611, CWE-918
Affected: opencart/opencart
Source: cve@mitre.org

References

http://karmainsecurity.com/KIS-2014-08Exploit, Third Party Advisory
http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/67Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/532763/100/0/threadedExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/68529Third Party Advisory, VDB Entry
https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076fIssue Tracking, Patch, Third Party Advisory
http://karmainsecurity.com/KIS-2014-08Exploit, Third Party Advisory
http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/67Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/532763/100/0/threadedExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/68529Third Party Advisory, VDB Entry
https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076fIssue Tracking, Patch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.