2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2017-10886" ,
"sourceIdentifier" : "vultures@jpcert.or.jp" ,
"published" : "2017-11-17T14:29:00.247" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T03:06:40.763" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en CS-Cart Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3) y CS-Cart Multivendor Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3) que permite que un atacante inyecte scripts web o HTML arbitrarios mediante vectores no especificados."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.4 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.3 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 3.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "LOW" ,
"exploitabilityScore" : 6.8 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "7CEDDB5F-0042-4F91-A374-72F6EA9FE8C5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "09888B17-F813-4B09-971A-5EE64C84B223"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "A4586C46-0266-4D02-A218-11E9B6C75258"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "1795D3A8-F3B7-4B00-8221-62F597888DE4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "060D0460-2ECD-41E5-934F-EDC39D75AF28"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "34F92804-A076-4877-A35A-3C6E9ABCC60D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "5689776B-779D-4C83-B837-FC97F53A3F6B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "36C1D456-0A84-4A7A-9CDF-CC25013EA2D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "215F550E-3946-4FC1-A53D-2159FB085C42"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "DEBEC0F2-04BC-4EDC-B406-8566EBA6BFC7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "6696CFF2-8CA3-476C-93C4-26DD2DD03EF7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "1AAFC419-F733-4513-8C91-09752D8D59F1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "42F2E657-E293-4375-A9DA-10427E805A64"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "01132E65-36E4-46BF-92B8-8C650A809C59"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "7B7A9A8F-7429-44C3-92DA-A7FE24731F9F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.5:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "AC17365C-07EB-468F-9645-C9F17BE39129"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.6:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "44A94CAE-30F6-414E-806B-721FE65AFFCA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.7:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "BAA8F0F8-3EB4-4D5E-88E1-F92B8A36977F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.8:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "00CAB998-2FF9-4352-90ED-A6102BFA0223"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.9:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "0E0F42A0-15F9-4587-A608-52D9F9EB18D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.10:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "BA6DD97F-4315-4483-9540-868E4EF479A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "5ADC7033-B392-46DB-B04B-2B7AB514AFA2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "D2531207-2B53-4CEF-9724-A3D958DC38D9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "BDC2FD45-31E7-4838-85A9-3C184DDA68C8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "0B3B4C1C-B63E-451D-BC9A-CB45C3A5A4FC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "03A50D9D-4321-48C7-B362-D7D02768E30C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "178E2618-9FED-452F-B379-36D50D544BC4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "2C822C02-3E28-4412-803D-10F2D5AC4D5D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "5B43CD84-D885-4006-BADA-7E1A3012608C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "CD843B2F-A3D5-49A5-B9F0-B8FC146931AF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "01C42531-506B-41FF-ADD8-BFE4C492E5D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "3BE29145-9836-4A10-AF2D-BB1EE63820C7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.1:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "8F33ECEC-3011-4131-AE8F-E44DF85F33ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.2:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "4C2FEE8A-DB91-43E6-9DC1-AB78DE23FF81"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.3:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "FD83A201-9C79-47BA-BA15-145A46FEEBEF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.4:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "4A03FAC1-4E22-4344-95E1-87A409C98507"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.5:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "1CC2EBD9-05B5-402C-B650-33BB86FC6043"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.6:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "1D9545E8-20E6-46E1-BBDB-662D07DB1E4B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.7:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "637065FC-883A-4E51-94B5-8F38F0574BCC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.8:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "5EBCC962-D3B4-4588-87EA-988CBD8EE7FD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.9:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "39E7A002-9015-4D75-AF02-21964DE6C0EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.10:*:*:ja:*:*:*:*" ,
"matchCriteriaId" : "14591AE4-58B9-4F71-BA5E-A1C897979A35"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://tips.cs-cart.jp/fix-jvn-29602086.html" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://jvn.jp/en/jp/JVN29602086/index.html" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://tips.cs-cart.jp/fix-jvn-29602086.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://jvn.jp/en/jp/JVN29602086/index.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
2023-04-24 12:24:31 +02:00
}
]
}