CVE-2025-56426
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calcula...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web medium.com