Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/23 11:38 p.m.15 views

CVE-2026-24136 Saleor has an Insecure Direct Object Reference (IDOR) in GraphQL API

Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.22.0-a.0 through 3.22.28 have a n Insecure Direct Object Reference IDOR vulnerability that allows unauthenticated actors to extract sensitive information in plain text. Orders created before Saleor...

8.7CVSS5.5AI score0.00364EPSS
SaveExploits1References7
Rows per page
Query Builder