CyberRota Analysis
AI-GeneratedWebkul Bagisto versions up to 2.4.4 are vulnerable due to a weakness in the Customer Search component, specifically in the /admin/customers/search file, which can lead to information disclosure through manipulated query arguments. Although the severity is classified as low, the exploit is publicly available, allowing remote attacks. Organizations using affected versions should prioritize patching to mitigate potential risks to sensitive customer data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/search of the component Customer Search. Executing a manipulation of the argument Query can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor confirms: "The reported issues were already identified through our internal security assessment process prior to this notification and are being handled through our established internal security and development lifecycle. Some of these items have already been addressed, while the remaining items are planned for resolution in upcoming product releases."