Lucene search
PRIOn knowledge basePRION:CVE-2023-23941HistoryFeb 03, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-02-0321:15:00
PRIOn knowledge base
www.prio-n.com
4
swagpaypal
shopware/platform
design/logic flaw
javascript-based
paypal integration
paypal plus
smart payment buttons
sepa
pay later
venmo
credit card
version 5.4.4
security plugin
nvd
0.001 Low
EPSS
Percentile
22.7%
SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal Plus, Smart Payment Buttons, SEPA, Pay Later, Venmo, Credit card), the amount and item list sent to PayPal may not be identical to the one in the created order. The problem has been fixed with version 5.4.4. As a workaround, disable the aforementioned payment methods or use the Security Plugin in version >= 1.0.21.
| CPE | Name | Operator | Version |
|---|---|---|---|
| swagpaypal | lt | 5.4.4 |
Related
github
github
osv
osv
CVE-2023-23941
2023-02-03 21:15:11
cve
cve
CVE-2023-23941
2023-02-03 21:15:11
veracode
veracode
Insufficient Verification Of Data Authenticity
2023-02-09 13:12:38
cvelist
cvelist
CVE-2023-23941 SwagPayPal payment not sent to PayPal correctly
2023-02-03 20:26:52
nvd
nvd
CVE-2023-23941
2023-02-03 21:15:11