What’s Vulnerable › Vulnerabilities

CVE-2023-45854

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-16 · updated 2026-06-17
• Weakness: CWE-190

Description

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function.

Affected products

• Shopkit Project Shopkit: 1.0

References

• https://kafka-esc.com/posts/2024/09/cve-2023-45854-interger-overflow-in-shopkit-1.0/
• https://shopk.it/

Get alerted when CVE-2023-45854 or the next vulnerability affects your stack