Information Disclosure

Merchello.Web is vulnerable to information disclosure. A remote attacker is able to obtain and enumerate all customers' address via the customer API query...