GitHub Advisoryadvisory · Go
GHSA-ggmw-mjhv-75rm NietThijmen ShoppingCart: Command injection in the connect function
HIGH
Official page ↗
- Aliases
- CVE-2024-53412
- Ecosystem
- Go
- Packages
- github.com/NietThijmen/ShoppingCart
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-77
- Reviewed
- 2026-04-16
Affected packages
• Go github.com/NietThijmen/ShoppingCart: <= 0.0.0-20241101155353-3dd137080276 (no fix yet)
Description
Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field
Related
Alias · CVE (1)
- CVE-2024-53412 Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and… vulnerability
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-53412 advisory
- https://github.com/NietThijmen/ShoppingCart/issues/1 web
- https://github.com/Buckdray/vulnerability-research/blob/main/CVE-2024-53412/README.md web
- https://github.com/NietThijmen/ShoppingCart package
- https://github.com/advisories/GHSA-ggmw-mjhv-75rm advisory