Creation of order credits was not validated by acl in admin orders

🗓️ 28 Jun 2021 16:32:57Reported by GoogleType

osv🔗 osv.dev👁 15 Views

Creation of order credits not validated by admin orders AC

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Missing Authentication for Critical Function	29 Jun 202117:23	–	github
Veracode	Insecure Order Credits Validation	25 Jun 202103:27	–	veracode
OSV	CVE-2021-32709	24 Jun 202119:15	–	osv
OSV	Missing Authentication for Critical Function	29 Jun 202117:23	–	osv
Cvelist	CVE-2021-32709 Creation of order credits was not validated by acl in admin orders	24 Jun 202118:50	–	cvelist
Prion	Design/Logic Flaw	24 Jun 202119:15	–	prion
CVE	CVE-2021-32709	24 Jun 202119:15	–	cve
NVD	CVE-2021-32709	24 Jun 202119:15	–	nvd

Source	Link
github	www.github.com/shopware/platform/security/advisories/GHSA-g7w8-pp9w-7p32
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32709
github	www.github.com/shopware/platform
store	www.store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659
shopware	www.shopware.com/en/download/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Jun 2021 16:57Current

2.3Low risk

Vulners AI Score2.3

EPSS0.001