Lucene search
PRIOn knowledge basePRION:CVE-2020-15269HistoryOct 20, 2020 - 9:15 p.m.
Code injection
2020-10-2021:15:00
PRIOn knowledge base
www.prio-n.com
2
In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is described in the linked advisory.
Related
cve
cve
CVE-2020-15269
2020-10-20 21:15:12
veracode
veracode
Token Validation Bypass
2020-10-21 04:49:32
cvelist
cvelist
CVE-2020-15269 Expired token reuse in Spree
2020-10-20 20:15:14
github
github
osv
osv
Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls
2020-10-20 20:03:52
CVE-2020-15269
2020-10-20 21:15:12
nvd
nvd
CVE-2020-15269
2020-10-20 21:15:12