Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47435
HistoryJun 10, 2024 - 6:02 a.m.

Improper Enforcement Of Behavioral Workflow

2024-06-1006:02:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vulnerability
digital downloads
online shops

6.9 Medium

AI Score

Confidence

Low

aimeos/ai-client-html is vulnerable to Improper enforcement of behavioral workflow. The vulnerability is due to an issue where digital downloads sold in online shops can be accessed without valid payment, for instance, if the payment process fails. This could allow attackers to obtain digital goods without completing the purchase transaction.

6.9 Medium

AI Score

Confidence

Low