CVE-2020-8176CWE-79

CVE-2020-8176: vulnerability in koa-shopify-auth

Published · Updated

Follow this CVE+ Monitor koa-shopify-auth+ Monitor @shopify/koa-shopify-auth

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.
Affected products
n/a · koa-shopify-auth