Information Disclosure

saleor is vulnerable to Information Disclosure. The vulnerability exists due to lack of exception handling which allows an attacker to gain access to sensitive infrastructure detail information...

PT-2019-13441

Name of the Vulnerable Software and Affected Versions Mirumee Saleor versions prior to 2.8.0 Description The issue concerns the accidental disabling of CSRF protection middleware, allowing attackers to send a POST request without a valid CSRF token. This enables the server to accept such requests...