CVE-2022-33077

An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint...

Design/Logic Flaw

An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint...

CVE-2022-33077

An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint...

nopCommerce 安全漏洞

nopCommerce is a set of open source general e-commerce platform. An Access Control Error vulnerability exists in nopCommerce 4.50.2 and prior versions. The vulnerability stems from the presence of improper access control in the application and can be exploited by an attacker to arbitrarily modify...