CVE-2021-47923 | OpenCart 3.0.3.8 User Account OCSESSID authentication spoofing (Exploit 50555 / EDB-50555)

A vulnerability described as critical has been identified in OpenCart 3.0.3.8. The affected element is an unknown function of the component User Account Handler. Executing a manipulation of the argument OCSESSID can lead to authentication bypass by spoofing.

This vulnerability is registered as CVE-2021-47923. It is possible to launch the attack remotely. Furthermore, an exploit is available.