Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 4:34 p.m.27 views

shopper/framework: Authorization bypass in multiple Livewire admin components

Impact Multiple Livewire components in the admin panel allowed an authenticated low-privilege user to mutate data without the required permission: - Order detail Filament actions cancel, mark paid, mark complete, capture payment, archive, start processing were callable with readorders only and di...

8.1CVSS5.8AI score0.00258EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder