CVE-2017-2143

MEDIUM

CS-Cart Japanese Edition <4.3.10-jp-1 - Auth Bypass

Title source: llm

Description

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.

References (2)

[Third Party Advisory, VDB Entry] http://jvn.jp/en/jp/JVN25598952/index.html

[Patch, Vendor Advisory] http://tips.cs-cart.jp/fix-jvn-25598952.html

Scores

CVSS v3 5.3

EPSS 0.0036

EPSS Percentile 57.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Classification

CWE

CWE-425

Status published

Affected Products (4)

frogman_office_inc/cs-cart_japanese_edition

frogman_office_inc/cs-cart_multivendor_japanese_edition

Frogman Office Inc./CS-Cart Japanese Edition < v4.3.10-jp-1 and earlier

Frogman Office Inc./CS-Cart Multivendor Japanese Edition < v4.3.10-jp-1 and earlier

Timeline

Published Apr 28, 2017

Tracked Since Feb 18, 2026