Missing Authentication for Critical Function

🗓️ 29 Jun 2021 17:10:23Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Missing Authentication for Critical Function in Shopware eCommerce Platform. Update to Version 6.4.1.1 Require

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Missing Authentication for Critical Function	29 Jun 202117:23	–	github
OSV	Creation of order credits was not validated by acl in admin orders	28 Jun 202116:57	–	osv
OSV	CVE-2021-32709	24 Jun 202119:15	–	osv
Veracode	Insecure Order Credits Validation	25 Jun 202103:27	–	veracode
Prion	Design/Logic Flaw	24 Jun 202119:15	–	prion
CVE	CVE-2021-32709	24 Jun 202119:15	–	cve
Cvelist	CVE-2021-32709 Creation of order credits was not validated by acl in admin orders	24 Jun 202118:50	–	cvelist
NVD	CVE-2021-32709	24 Jun 202119:15	–	nvd

Source	Link
github	www.github.com/shopware/platform/security/advisories/GHSA-g7w8-pp9w-7p32
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32709
shopware	www.shopware.com/en/changelog/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Jun 2021 17:23Current

4.1Medium risk

Vulners AI Score4.1

EPSS0.001