Lucene search
Veracode Vulnerability DatabaseVERACODE:31058HistoryJun 25, 2021 - 3:27 a.m.
Insecure Order Credits Validation
2021-06-2503:27:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
22.7%
shopware does not perform secure order credits validation. An attacker is able to manipulate the creation of order credits as it is not properly validated by ACL in admin orders.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware/platform | le | 6.4.1.0 | |
| shopware/core | le | 6.4.1.0 |
Related
cve
cve
CVE-2021-32709
2021-06-24 19:15:08
osv
osv
Missing Authentication for Critical Function
2021-06-29 17:23:10
Creation of order credits was not validated by acl in admin orders
2021-06-28 16:57:32
CVE-2021-32709
2021-06-24 19:15:08
prion
prion
Design/Logic Flaw
2021-06-24 19:15:00
github
github
Missing Authentication for Critical Function
2021-06-29 17:23:10
nvd
nvd
CVE-2021-32709
2021-06-24 19:15:08
cvelist
cvelist