CVE-2023-42428 Information

Description

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.

Reference

https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ https://jvn.jp/en/jp/JVN22220399/