CVE-2020-28838: CSRF
Published Dec 11, 2020
·Updated
Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.
Affected Software
2 affected components
composer/opencart/opencart=3.0.3.6
OpenCart opencart=3.0.3.6
Event History
Dec 11, 2020
CVE Published
via MITRE·02:19 PM
Data Sourced
via MITRE·02:19 PM
Description
May 24, 2022
Advisory Published
via GitHub·05:36 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-28838?
The severity of CVE-2020-28838 is low with a severity value of 3.5.
2
What is the affected software for CVE-2020-28838?
The affected software for CVE-2020-28838 is Opencart Ltd. Opencart CMS 3.0.3.6.
3
How does CVE-2020-28838 work?
CVE-2020-28838 allows an attacker to add items to the cart in Opencart CMS 3.0.3.6 via the Add to cart option.
4
Is there a fix for CVE-2020-28838?
At this time, there is no fix available for CVE-2020-28838. It is recommended to follow the vendor's security recommendations and apply any updates or patches as they become available.
5
Where can I find more information about CVE-2020-28838?
You can find more information about CVE-2020-28838 on the Exploit-DB website and the Opencart official website.