VulnerabilityModified

CVE-2018-18964

The .htaccess file in catalog/images/ bans the html extension, but there are several extensions in which contained HTML can be executed, such as the svg extension.

MEDIUM 4.9EPSS 1.00%

Does this matter?

Lower severity and a low EPSS score (1.00%). Track it; it rarely justifies an emergency change on its own.

Description

osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several extensions in which contained HTML can be executed, such as the svg extension.

CVSS 3.0: 4.9 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS: 1.00% probability · 61th percentile
CISA KEV: Not listed
Affected: oscommerce/online merchant
Source: cve@mitre.org

References

https://github.com/osCommerce/oscommerce2/issues/631Third Party Advisory
https://github.com/osCommerce/oscommerce2/issues/631Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.