Opencart Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2023-2315 - Vulnerability Database

Opencart

Opencart Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2023-2315

High

Reference: CVE-2023-2315

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2315

Title: Opencart Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Overview:

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server