Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:0 p.m.9 views

Cezerin Unauthorized Acces

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

7.5CVSS6.7AI score0.00344EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2019/10/29 7:15 p.m.8 views

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

7.5CVSS7.4AI score0.00344EPSS
Exploits1References1
OSV
OSV
added 2019/10/29 7:15 p.m.9 views

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

7.5CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2019/10/29 7:15 p.m.10 views

Information disclosure

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

5CVSS7.4AI score0.00344EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder