PT-2010-5210

Name of the Vulnerable Software and Affected Versions Spree versions 0.11.x through 0.11.1 Spree versions 0.30.x before 0.30.0 Description The issue allows remote attackers to obtain sensitive information via vectors involving API endpoints such as "admin/products.json", "admin/users.json", or...