Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/02/12 1:04 a.m.•25 views

CVE-2025-69871

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a non-atomic read-check-update operation when enforcing promotion usage limits. This allows unauthenticated remote attackers to bypass usage...

8.1CVSS5.6AI score0.00365EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/02/12 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-69871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a...

8.1CVSS5.6AI score0.00365EPSS
SaveExploits1References2
OSV
OSV
•added 2026/02/11 7:15 p.m.•10 views

CVE-2025-69871

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a non-atomic read-check-update operation when enforcing promotion usage limits. This allows unauthenticated remote attackers to bypass usage...

8.1CVSS5.8AI score0.00365EPSS
SaveExploits1References3
OSV
OSV
•added 2026/02/11 7:15 p.m.•18 views

UBUNTU-CVE-2025-69871

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a non-atomic read-check-update operation when enforcing promotion usage limits. This allows unauthenticated remote attackers to bypass usage...

8.1CVSS5.8AI score0.00365EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/11 12:00 a.m.•8 views

CVE-2025-69871

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a non-atomic read-check-update operation when enforcing promotion usage limits. This allows unauthenticated remote attackers to bypass usage...

5.6AI score0.00365EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•3 views

CVE-2025-69871: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage function of the promotion module. The function performs a non-atomic read-check-update operation when enforcing promotion usage limits. This allows unauthenticated remote attackers to bypass usage...

8.1CVSS5.8AI score0.00365EPSS
SaveExploits1References1
Rows per page
Query Builder