Description
A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function.
High · 7.5
CVE-2023-45854
EUVD-2023-50123GHSA-vw3f-8r5j-7wqm
A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd …
Published Sep 16, 2024 · Updated Sep 17, 2024 · Assigned by mitre