更新: 2423 个文件 - 2026-03-18 14:23:01

这个提交包含在:
hao
2026-03-18 14:23:01 -07:00
父节点 9a5f48cdf7
当前提交 96b5353a91
修改 2423 个文件,包含 239337 行新增2806 行删除

查看文件

@@ -0,0 +1,68 @@
{
"canonical_id": "opencart--CVE-2025-0841",
"system_id": "opencart",
"display_name": "OpenCart",
"category": "ecommerce",
"advisory_mode": "core",
"title": "CVE-2025-0841",
"summary": "A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability affects the function loadMore of the component News. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.",
"published_at": "2025-01-29T21:15:20.973",
"updated_at": "2025-01-29T21:15:20.973",
"severity": "high",
"cvss_score": 7.3,
"exploit_status": "unknown",
"source_confidence": "official",
"official_source_url": "https://gist.github.com/mcdruid/52383f40d11becb79ce4033cb46546eb",
"secondary_source_urls": [
"https://vuldb.com/?ctiid.293998",
"https://vuldb.com/?id.293998",
"https://vuldb.com/?submit.485445"
],
"aliases": [
"CVE-2025-0841"
],
"cve_ids": [
"CVE-2025-0841"
],
"ghsa_ids": [],
"osv_ids": [],
"affected_versions": [],
"fixed_versions": [],
"package_name": null,
"render_markdown": false,
"case_path": null,
"secure_code_topics": [
"authz-server-side-recheck",
"plugin-extension-trust-policy",
"file-upload-validation",
"deserialization-safety"
],
"status": "triage",
"triage_reasons": [
"missing affected/fixed version details"
],
"verification_status": "triage-manual",
"verification_mode": "synthetic",
"last_verified_at": null,
"last_run_id": null,
"evidence_bundle": null,
"historical_status": null,
"latest_status": null,
"browser_evidence": {
"required": false,
"present": false,
"refs": []
},
"repro_profile_id": "deserialization-generic",
"artifact_mode": "official-image",
"blocked_reason": null,
"metadata": {
"source_names": [
"NVD OpenCart"
],
"source_kinds": [
"nvd-search"
],
"candidate_count": 1
}
}