CVE-2024-50945

CVSS 7.5 HIGHEPSS 0.6%CWE-284

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/AbdullahAlmutawa/CVE-2024-50945 https://github.com/simplcommerce/SimplCommerce https://www.simplcommerce.com/