Rental Module Project CVEs and Security Vulnerabilities

CVE-2023-2712

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Rental Module Project

Products

Rental Module

CVE-2023-2713

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed