CVE-2026-23797

Katalog CVE

CVSS 4.9 · Medium EPSS 0,29%

Kerentanan Plaintext Storage of a Password pada opensolution quick.cart. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Rincian

Terbit di NVD

5 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-256: Plaintext Storage of a Password

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.pl/posts/2026/02/CVE-2026-23796 advisory pihak ketiga
• https://opensolution.org/sklep-internetowy-quick-cart.html product