Executive brief
Incorrect Permission Assignment for Critical Resource in ShopXO
Affected products
- Packagist shopxo/shopxo
Junglewise Threat Intelligence
CVE-2022-28056: Incorrect Permission Assignment for Critical Resource in ShopXO
CVE-2022-28056 · Severity: low · CVSS 3.1 · Published 2022-05-03
Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.
Related threats
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
- ShopXO Server-Side Request Forgery Vulnerability
- ShopXO RCE Vulnerability