by Kastro
Paper/Archive/CVE-2024-50944

CVE-2024-50944

mitre — Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functional…

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
52
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.7.637 × 2012.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/simplcommerce/SimplCommercerefsimplcommerce.comrefgithub.com/AbdullahAlmutawa/CVE-2024-50944refgithub.com/simplcommerce/SimplCommerce/issues/1110