E-commerce Address Manipulation Vulnerability in Saleor
CVE-2024-29888

Currently unrated

Key Information:

Vendor

Saleor

Status
Vendor
CVE Published:
27 March 2024

What is CVE-2024-29888?

Saleor, a robust e-commerce platform, has an address manipulation vulnerability wherein customers utilizing the 'Pickup: Local stock only' delivery option may overwrite the intended warehouse address with their personal address. This flaw can lead to unintended exposure of customer information, compromising operational security for businesses relying on Saleor. Affected versions have been patched to enhance security and protect user data from potential misuse.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

.