1 matches found
Sylius has a security vulnerability via adjustments API endpoint
Impact A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve order tokens. Using these tokens, an attacker can...
5.3CVSS5.9AI score0.00377EPSS
SaveExploits0References4Affected Software1
20