CVE-2024-50944

Impact

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/AbdullahAlmutawa/CVE-2024-50944
• https://github.com/simplcommerce/SimplCommerce
• https://github.com/simplcommerce/SimplCommerce/issues/1110
• https://www.simplcommerce.com/