high7.5
CVE-2022-28451
nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
Impact
nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nopcommerce | Nopcommerce | Version 4.50.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4
- https://github.com/nopSolutions/nopCommerce/issues/6203
- https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4
- https://github.com/nopSolutions/nopCommerce/issues/6203