PT-2022-9766 · Firstmall · Firstmall

Published 2022-02-25 · Updated 2022-03-08 · CVE-2021-26617

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firstmall (affected versions not specified)

Description The issue is due to insufficient verification of various input values from user input, allowing remote attackers to execute malicious code in Firstmall via the navercheckout add function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-26617

Affected Products

Firstmall

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-26617 · Security Note
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36469 · Note
• https://t.me/cvenotify/27875 · Telegram Post