Skip to content
OpenAdvisories

Archive

6 October 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-39275 Public exploit

    Improper object type validation in saleor

    Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. This vulnerability can…