Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54981
HistoryJun 02, 2022 - 12:00 a.m.

solidus_backend cross-site request forgery vulnerability

2022-06-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
15

0.001 Low

EPSS

Percentile

30.5%

Solidus is an open source e-commerce system. solidus_backend is the administrative interface of the Solidus e-commerce framework. solidus_backend is vulnerable to cross-site request forgery, which can be exploited by attackers to change the status of order adjustments while holding an order number, and execution occurs on the store administrator’s computer.

0.001 Low

EPSS

Percentile

30.5%