CVE-2022-39275

CVE-2022-39275 CVE-2022-39275 的 POC。 相关公告资源： NIST NVD CVE.org Github Security Advisory 这是提交哈希 47f9f5fb29be2b5892c79ace4f23022f397a0a5e 链接 的一个分支。由于还需要更改 git 子模块，因此重新推送。 POC 设置 按照 设置指南 操作。如果指南已过时，以下是步骤： cd saleor-platform docker compose build docker compose run --rm api python3 manage.py migrate...

CVE-2026-23499

CVE-2026-23499: Saleor 存在通过不受限制的文件上传导致的存储型XSS漏洞 概述 字段| 详情 ---|--- CVE ID| CVE-2026-23499 严重性| HIGH 安全公告| 查看安全公告 发现者| Lukasz Rybak 受影响的产品 saleor/saleor 详情 Saleor 允许经过身份验证的员工用户或应用程序上传任意文件，包括包含 Javascript 的恶意 HTML 和 SVG 文件。根据部署策略，这些文件可能会与仪表盘在同一域名下提供，且不受任何限制，从而导致恶意脚本在用户浏览器上下文中执行。 影响...

CVE-2026-22849

CVE-2026-22849: Saleor 富文本字段缺少适当的 HTML 净化处理 概述 字段| 详情 ---|--- CVE ID| CVE-2026-22849 严重性| HIGH 安全公告| 查看安全公告 发现者| Lukasz Rybak 受影响产品 saleor/saleor 详情 Saleor 允许用户使用 HTML 修改富文本字段，而未在后端运行任何 HTML 净化器，从而允许恶意行为者对仪表板和店面执行存储型 XSS 攻击。 影响 恶意员工可以构造脚本注入来针对其他员工，可能窃取他们的访问令牌和/或刷新令牌。 缓解措施...

CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / 未認証PII流出 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-24136 脆弱性タイプ| IDOR - ユーザー制御キーによる認証回避 CWE-639 ソフトウェア| Saleor eコマースプラットフォーム 影響を受けるバージョン| 3.2.0 - 3.20.109 · 3.21.0 - 3.21.44 · 3.22.0 - 3.22.28 修正バージョン| 3.20.110 · 3.21.45 · 3.22.29 CVSS 3.1| 7.5 HIGH...

CVE-2026-93650

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-93650

CVE-2026-93650 affects Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14, specifically the get_client_ip function in saleor/account/throttling.py. The root cause is that client-supplied IP headers (X-Forwarded-For) are trusted, allowing IP spoofing to bypass rate limiting and enable excessive authent...

EUVD-2026-83264

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-93650 Saleor throttling.py get_client_ip excessive authentication

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-93650 Saleor throttling.py get_client_ip excessive authentication

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-93650 Saleor throttling.py get_client_ip excessive authentication

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-93650: Improper Restriction of Excessive Authentication Attempts

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function getclientip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of excessive authentication attempts. The attack can be executed...

CVE-2026-44472

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

CVE-2026-48744

Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...

CVE-2026-44472

Saleor (e-commerce platform) versions from 2.10.0rc1 through 3.21.67 , 3.22.63 , and 3.23.22 are affected by an account pre-hijacking vulnerability in the activation flow. The root cause is that email verification is treated as sufficient proof of account ownership, and confirm_account.py automat...

CVE-2026-44472 Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

CVE-2026-44472 Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

EUVD-2026-61069

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

CVE-2026-44472 Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

CVE-2026-44472

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

CVE-2026-48744 Saleor: Anonymous users can modify channel settings via `channelUpdate` due to `all([])` bypass in permission check

Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...