Vulnerabilities in solidusio

5 results

CVE-2021-43805HIGHReDos vulnerability on guest checkout email validationEPSS 1.4%CVE-2020-15109MEDIUMAbility to change order address without triggering address validations in solidusEPSS 0.9%CVE-2021-41274CRITICALAuthentication Bypass by CSRF WeaknessEPSS 0.6%CVE-2021-43846MEDIUMCSRF forgery protection bypass for Spree::OrdersController#populateEPSS 0.6%CVE-2022-31000LOWCSRF allows attacker to finalize/unfinalize order adjustments in solidus_backendEPSS 0.4%