Vulnerabilities (CVE)

Filtered by vendor Kerawen Subscribe
Filtered by product Kerawen
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-40922 1 Kerawen 1 Kerawen 2024-11-21 N/A 9.8 CRITICAL
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().