Lucene search
GoogleOSV:CVE-2018-14020HistoryAug 20, 2018 - 10:29 p.m.
CVE-2018-14020
2018-08-2022:29:00
Google
osv.dev
5
An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn’t use eShop’s checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paymorrow-module | eq | 1.0.2 | |
| paymorrow-module | eq | 2.0.0 | |
| paymorrow-module | eq | 1.0.2-RC.1 |
Related
cve
cve
CVE-2018-14020
2018-08-20 22:29:00
github
github
Paymorrow Improper Input Validation vulnerability
2022-05-13 01:49:53
cvelist
cvelist
CVE-2018-14020
2018-08-20 22:00:00
nvd
nvd
CVE-2018-14020
2018-08-20 22:29:00
prion
prion
Design/Logic Flaw
2018-08-20 22:29:00
osv
osv
Paymorrow Improper Input Validation vulnerability
2022-05-13 01:49:53