Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server
References:GSA_kwCzR0hTQS12NGoyLWN3bW0teGc4Oc4AA2EH
OpenCart Path Traversal vulnerability
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| packagist:opencart/opencart | >= 4.0.0.0, < 4.0.2.3 | 4.0.2.3 | |
Affected Version RangesAll affected versionsAll unaffected versions |
|||