Mass Assignment Vulnerability in Spree E-commerce Platform by Spree Commerce
CVE-2008-7310

Currently unrated

Key Information:

Vendor

Spreecommerce

Status
Spree
Vendor
CVE Published:
5 April 2012

What is CVE-2008-7310?

The affected version of Spree (0.2.0) suffers from a mass assignment vulnerability, which improperly allows attackers to manipulate model attributes through specially crafted URLs. By exploiting this issue, attackers can alter the order state and bypass critical payment steps, significantly jeopardizing the integrity of the e-commerce platform. This highlights the importance of proper attribute whitelisting and restrictive access controls.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://spreecommerce.com/blog/2008/09/16/security-vulnera...
x_refsource_CONFIRM
http://railspikes.com/2008/9/22/is-your-rails-application...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.