CVE-2024-29036

CVE-2024-29036 affects Saleor Storefront. Before commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, authenticating a user leaks the session data of that user to anonymous visitors via cache. Impact is data exposure of authenticated user data; no exploitation details provided beyond this leakage. Re...

CVE-2023-3294

CVE-2023-3294 corresponds to a DOM-based XSS in saleor/react-storefront (GitHub repo) prior to the commit c29aab226f07ca980cc19787dcef101e11b83ef7. Multiple sources (NVD, Red Hat, OSV, CVE listings, Huntr) describe a cross-site scripting vulnerability in the React storefront with potential user i...