CVE-2024-21514
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
SQL injection in opencart
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Packagist | opencart/opencart | <=3.0.3.9 | |
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-21514
- https://github.com/opencart/opencart/commit/46bd5f5a8056ff9aad0aa7d71729c4cf593d67e2
- https://github.com/opencart/opencart
- https://github.com/opencart/opencart/blob/3.0.3.9/upload/catalog/model/extension/payment/divido.php%23L114
- https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266565
Verify integrity in audit chain (admin only). AS-IS.