Skip to content
OpenAdvisories
High · 8.1 CVE-2021-26617 EUVD-2021-13411GHSA-r9p3-jf39-75m9

Gabia Firstmall remote code execution vulnerability

Published Feb 25, 2022 · Updated Aug 3, 2024 · Assigned by krcert

Description

This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckout_add function.

Affected products

VendorProductAffectedFixed
Gabia Firstmall multilingual latest version —

References