Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2024-48107sparkshop · Server-Side Request Forgery (SSRF) Medium6.5EPSS 0.2%2024-10-28CVE Database V5CVE-2024-48107 SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to scan ports on the Intranet or local network where the server resides, attack applications running on the Intranet or local network, or read metadata on the cloud server. EPSS 0.2%Vulnerability CWE-918	CVE Database V5	2024-10-28
High	7.5	EPSS 0.5%	CVE-2024-46307sparkshop · Improper Enforcement of Behavioral Workflow High7.5EPSS 0.5%2024-10-09CVE Database V5CVE-2024-46307 A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. EPSS 0.5%Vulnerability CWE-841	CVE Database V5	2024-10-09

Page 1 of 1