CVE-2023-32694

CVE-2023-32694 affects Saleor Core where the non-constant time HMAC signature validation in the Adyen plugin can be exploited via timing attacks to infer the secret key and forge events, potentially corrupting database state (e.g., marking an order as paid). Concrete details across connected sour...