1 matches found
Authorization Bypass Through User-Controlled Key
Overview craftcms/commerce is a Craft Commerce Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the number parameter in the cart loading process. An attacker can gain unauthorized access to and modify another user's shopping cart by...
6.3CVSS5.7AI score0.00284EPSS
SaveExploits1References2
20