Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-46942

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-ggpm-9qfx-mhwg

EverShop vulnerable to improper authorization in GraphQL endpoints Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.9, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.

gitlab/npm/@evershop/evershop/CVE-2023-46942

EverShop vulnerable to improper authorization in GraphQL endpoints Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.