CVE-2020-7964

2020-01-2420:15:11

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

38.7%

JSON

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).