CVE-2025-15116

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-15116
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15116.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-15116
Published
2025-12-28T03:15:40.400Z
Modified
2026-03-14T15:03:55.775378Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
[none]
Details

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing a manipulation results in race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/opencart/opencart

Affected ranges

Type
GIT
Repo
https://github.com/opencart/opencart
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2c4efa4d95d29a510f59037b2a302f8e2a229e4a
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0.3"
        }
    ]
}

Affected versions

2.*
2.0.0.0
2.0.1.0
2.0.1.1
2.0.2.0
2.0.3.0
2.0.3.1
2.1.0.0
2.1.0.1
2.2.0.0
2.3.0.0
2.3.0.1
2.3.0.2
3.*
3.0.0.0
3.0.0.2
3.0.1.1
3.0.1.2
3.0.2.0
4.*
4.0.0.0
4.0.1.0
4.0.1.1
4.0.2.0
4.0.2.1
4.0.2.2
4.0.2.3
4.1.0.0
4.1.0.1
4.1.0.2
4.1.0.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15116.json"