CVE-2020-15109

In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there is an bility to change order address without triggering address validations. This vulnerability allows a malicious customer to craft request data with parameters that allow changing the address of the current order without changing the...

PT-2020-14191

Name of the Vulnerable Software and Affected Versions Solidus versions prior to 2.8.6 Solidus versions prior to 2.9.6 Solidus versions prior to 2.10.2 Description This issue allows a malicious customer to change the order address without triggering address validations, potentially altering shipme...