CVE-2023-40922 | BDVDB-2026-216037 Detail

Description#

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.friendsofpresta.org/modules/2023/11/02/kerawen.html

Exploit#

No public exploit known

History#

Version 12023-11-04Record published in the CVE List.
Version 22024-09-05Most recent update recorded in the CVE List.