Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/09/11 9:28 p.m.8 views

Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/11 9:28 p.m.4 views

GHSA-5VF4-452P-JJHF Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

6.5CVSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90547

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

6.5CVSS
SaveExploits0References3
Rows per page
Query Builder