HackerOne Vulnerabilities and Affected Products
Vulnerabilities associated with express-cart.
Products
Clear product- hapi node module4 vulnerabilities
- RubyGems4 vulnerabilities
- sequelize node module4 vulnerabilities
- coffeescript node module3 vulnerabilities
- crud-file-server node module2 vulnerabilities
- express-cart2 vulnerabilities
- html-janitor node module2 vulnerabilities
- i18next node module2 vulnerabilities
- m-server2 vulnerabilities
- marked node module2 vulnerabilities
- Nextcloud Server2 vulnerabilities
- private_address_check ruby gem2 vulnerabilities
- remarkable node module2 vulnerabilities
- sanitize-html node module2 vulnerabilities
- serve node module2 vulnerabilities
- ws node module2 vulnerabilities
- 11xiaoli node module1 vulnerability
- 22lixian node module1 vulnerability
- 360class.jansenhm node module1 vulnerability
- 626 node module1 vulnerability
- active-support ruby gem1 vulnerability
- adamvr-geoip-lite node module1 vulnerability
- aedes1 vulnerability
- aegir node module1 vulnerability
- aerospike node module1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-16483HIGH | Authentication Bypass by Spoofing in express-cartA deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators. CWE-290Feb 1, 2019 | CVSS8.8v3.0 | EPSS1.16% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-3758HIGH | express-cart unrestricted file upload vulnerabilityUnrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine. | CVSS8.8v3.1 | EPSS27.5% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |