Lucene search

K

Veracode Vulnerability DatabaseVERACODE:46955

HistoryMay 16, 2024 - 8:08 a.m.

Unauthorized Data Access

2024-05-1608:08:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3

klaviyo

magento 2

unauthorized data access

insufficient access controls

endpoint

private customer data

guest-carts

order details

magento api

vulnerability

6.9 Medium

AI Score

Confidence

Low

Klaviyo Magento 2 is vulnerable to Unauthorized Data Access. The vulnerability is due to insufficient access controls in an endpoint, allowing attackers to read private customer data from stores by reclaiming guest-carts and accessing order details via the Magento API.

6.9 Medium

AI Score

Confidence

Low