Unrated severityNVD Advisory· Published Sep 12, 2023· Updated Sep 26, 2024

CVE-2023-40834

Description

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter.

Affected products

OpenCart CMS/OpenCart CMSdescription
Opencart/Opencartllm-fuzzy
Range: = 4.0.2.2

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/174525/OpenCart-CMS-4.0.2.2-Brute-Force.htmlmitre
www.opencart.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000