Get real-time updates on Telegram
ghsa:GHSA-PGJ4-G5J4-CMFX: cart2quote/module-quotation-encoded >= 4.1.6, <= 4.4.5, >= 5.0.0, < 5.4.4; +1 more affected products
Withdrawn Advisory: cart2quote/module-quotation-encoded Remote Code Execution via downloadCustomOptionAction. Affected range: >= 4.1.6, <= 4.4.5. Affected range: >= 5.0.0, < 5.4.4. Fixed version: 5.4.4. Affected range: >= 4.1.6, < 4.4.6. Fixed version: 4.4.6. Affected range: >= 5.0.0, < 5.4.4. Fixed version: 5.4.4.
Affected technology
cart2quote/module-quotation-encoded · >= 4.1.6, <= 4.4.5
Vendor not specified by the source
cart2quote/module-quotation-encoded · >= 5.0.0, < 5.4.4
Vendor not specified by the source
cart2quote/module-quotation · >= 4.1.6, < 4.4.6
Vendor not specified by the source
cart2quote/module-quotation · >= 5.0.0, < 5.4.4
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could run code remotely under the conditions described by the source. Source advisory’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as low.
- Product
- cart2quote/module-quotation-encoded
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-08 08:50:52.119177+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-pgj4-g5j4-cmfx.html