CVE-2021-47946

OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account details by tricking users into visiting malicious pages. Attackers can craft CSRF payloads that change victim email addresses and account information, then use password reset functionality to gain unauthorized access to compromised accounts.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.exploit-db.com/exploits/49407
https://www.opencart.com
https://www.opencart.com/index.php?route=cms/download
https://www.vulncheck.com/advisories/opencart-account-takeover-via-cross-site-request-forgery

Configurations

No configuration.

History

06 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary	(es) OpenCart 3.0.36 contiene una vulnerabilidad de falsificación de petición en sitios cruzados en el endpoint /account/edit que permite a atacantes no autenticados modificar los detalles de la cuenta de la víctima engañando a los usuarios para que visiten páginas maliciosas. Los atacantes pueden crear cargas útiles de CSRF que cambian las direcciones de correo electrónico y la información de la cuenta de la víctima, y luego usar la funcionalidad de restablecimiento de contraseña para obtener acceso no autorizado a las cuentas comprometidas.	(es) OpenCart 3.0.36 contiene una vulnerabilidad de Cross-Site Request Forgery en el endpoint /account/edit que permite a atacantes no autenticados modificar los detalles de la cuenta de la víctima engañando a los usuarios para que visiten páginas maliciosas. Los atacantes pueden crear cargas útiles de CSRF que cambian las direcciones de correo electrónico y la información de la cuenta de la víctima, y luego usar la funcionalidad de restablecimiento de contraseña para obtener acceso no autorizado a las cuentas comprometidas.

Information

Published : 2026-05-10 13:16

Updated : 2026-10-06 22:10

NVD link : CVE-2021-47946

Mitre link : CVE-2021-47946

CVE.ORG link : CVE-2021-47946

JSON object : View

Products Affected

No product.

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2021-47946", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2021-47946", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-11T16:05:52.054158Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Opencart", "product": "OpenCart", "versions": [{"status": "affected", "version": "3.0.3.6"}]}]}], "published": "2026-05-10T13:16:31.027", "references": [{"url": "https://www.exploit-db.com/exploits/49407", "source": "disclosure@vulncheck.com"}, {"url": "https://www.opencart.com", "source": "disclosure@vulncheck.com"}, {"url": "https://www.opencart.com/index.php?route=cms/download", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/opencart-account-takeover-via-cross-site-request-forgery", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account details by tricking users into visiting malicious pages. Attackers can craft CSRF payloads that change victim email addresses and account information, then use password reset functionality to gain unauthorized access to compromised accounts."}, {"lang": "es", "value": "OpenCart 3.0.36 contiene una vulnerabilidad de Cross-Site Request Forgery en el endpoint /account/edit que permite a atacantes no autenticados modificar los detalles de la cuenta de la v\u00edctima enga\u00f1ando a los usuarios para que visiten p\u00e1ginas maliciosas. Los atacantes pueden crear cargas \u00fatiles de CSRF que cambian las direcciones de correo electr\u00f3nico y la informaci\u00f3n de la cuenta de la v\u00edctima, y luego usar la funcionalidad de restablecimiento de contrase\u00f1a para obtener acceso no autorizado a las cuentas comprometidas."}], "lastModified": "2026-10-06T22:10:00.247", "sourceIdentifier": "disclosure@vulncheck.com"}