Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/07/17 2:32 p.m.31 views

Sylius has a security vulnerability via adjustments API endpoint

Impact A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve order tokens. Using these tokens, an attacker can...

5.3CVSS5.9AI score0.00377EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder