Lucene search
+L

1 matches found

Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.26 views

CVE-2020-15245: Ability to switch customer email address on account detail page and stay verified

Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...

4.3CVSS4.4AI score0.00627EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder