CyberSecBulletin

Rental Module vulnerabilities

We track 2 vulnerabilities in Rental Module products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Rental Module vulnerabilities

  • 9.8 Critical severity

    Rental Module: Authorization Bypass Through User-Controlled Key

    CVE-2023-2713Rental Module

    Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15.

  • 9.8 Critical severity

    Rental Module: Unrestricted Upload of File with Dangerous Type

    CVE-2023-2712Rental ModuleEPSS 1.29%

    Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: