E-commerce Address Manipulation Vulnerability in Saleor
CVE-2024-29888
Currently unrated
What is CVE-2024-29888?
Saleor, a robust e-commerce platform, has an address manipulation vulnerability wherein customers utilizing the 'Pickup: Local stock only' delivery option may overwrite the intended warehouse address with their personal address. This flaw can lead to unintended exposure of customer information, compromising operational security for businesses relying on Saleor. Affected versions have been patched to enhance security and protect user data from potential misuse.