Skip to content
OpenAdvisories

Package · RubyGems

solidus_api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2020-15109

    Ability to change order address without triggering address validations in solidus

    In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there is an bility to change order address without triggering address validations. This vulnerability allows a malicious customer to craft request data with parameters that allow changing the address of the…

    solidusio solidus solidus_frontend solidus_api RubyGems