Advisory Database
  • Advisories
  • Dependency Scanning
  1. composer
  2. ›
  3. cart2quote/module-quotation-encoded
  4. ›
  5. GHSA-pgj4-g5j4-cmfx

GHSA-pgj4-g5j4-cmfx: cart2quote/module-quotation-encoded Remote Code Execution via downloadCustomOptionAction

May 15, 2024

This advisory has been withdrawn.

References

  • bitbucket.org/cart2quote2/cart2quote2-releases
  • github.com/FriendsOfPHP/security-advisories/blob/master/cart2quote/module-quotation/2017-02-01.yaml
  • github.com/advisories/GHSA-pgj4-g5j4-cmfx
  • web.archive.org/web/20230131172111/https://cart2quote.zendesk.com/hc/en-us/articles/115000616303--FIXED-Security-Vulnerability-in-downloadCustomOptionAction

Code Behaviors & Features

Detect and mitigate GHSA-pgj4-g5j4-cmfx with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

This advisory has been withdrawn.

Solution

This advisory has been withdrawn.

Impact 7 HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Learn more about CVSS

Weakness

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Source file

packagist/cart2quote/module-quotation-encoded/GHSA-pgj4-g5j4-cmfx.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sat, 10 Oct 2026 00:17:42 +0000.