CVE-2023-42428 - Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system

Published Nov 17, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 1.29%

Description

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.

Affected products

Vendor CubeCart Limited Product CubeCart Default
n/a
- Version
  prior to 6.5.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

CubeCart Limited

CubeCart

n/a

Version	Status	Constraints
prior to 6.5.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
Vendor Advisory
https://jvn.jp/en/jp/JVN22220399/
PatchThird Party Advisory

Link	Providers	Tags
https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/		Vendor Advisory
https://jvn.jp/en/jp/JVN22220399/		PatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 17, 2023

Updated Aug 2, 2024

Reserved Nov 13, 2023

Link CVE-2023-42428

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-42428

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-42428