CVE-2021-32720

Sylius is an Open Source eCommerce platform on top of Symfony. In versions of Sylius prior to 1.9.5 and 1.10.0-RC.1, part of the details order ID, order number, items total, and token value of all placed orders were exposed to unauthorized users. If exploited properly, a few additional informatio...

CVE-2021-32720

CVE-2021-32720 affects Sylius prior to 1.9.5 and 1.10.0-RC.1, where details of all placed orders (order ID, order number, items total, token value) were exposed to unauthorized users via new API endpoints. Potential additional data include the number of items in the cart and shipping date; while ...