Lucene search
GoogleOSV:GHSA-489X-CCJW-Q7C4HistoryMay 13, 2022 - 1:49 a.m.
Paymorrow Improper Input Validation vulnerability
2022-05-1301:49:53
Google
osv.dev
6
An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn’t use eShop’s checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oxid-esales/paymorrow-module | eq | 1.0.2-RC.1 | |
| oxid-esales/paymorrow-module | eq | 2.0.0 |
Related
cvelist
cvelist
CVE-2018-14020
2018-08-20 22:00:00
cve
cve
CVE-2018-14020
2018-08-20 22:29:00
github
github
Paymorrow Improper Input Validation vulnerability
2022-05-13 01:49:53
osv
osv
CVE-2018-14020
2018-08-20 22:29:00
nvd
nvd
CVE-2018-14020
2018-08-20 22:29:00
prion
prion
Design/Logic Flaw
2018-08-20 22:29:00