Description (CNA)
A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / express-cart | affected >=1.1.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.