CVE-2021-26617CWE-20

Gabia Firstmall remote code execution vulnerability

High · published February 25, 2022

CVSS v3.1
8.1
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckout_add function.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01269 · 69.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-02-25T18:10Z
EPSS history
Timeline
  • 25 FEB 18:10Z
    Gabia Firstmall remote code execution vulnerability
    cvelistv5