Description
Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Opencart | Opencart | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | opencart/opencart | >= 4.0.0.0, < 4.0.2.3 | 4.0.2.3 | GHSA-v4j2-cwmm-xg89 |