Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/11/17 9:50 p.m.20 views

@vendure/core's insecure currencyCode handling allows wrong payment amounts

Impact Currently, in many Vendure deployments it's possible to select any currencyCode really any, doesn't need to be assigned to the channel and pay through Mollie and Stripe in that particular currencyCode. The prices are not transformed. The result is the Order is in Payment Settled in the...

7.2AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder