Skip to content
OpenAdvisories

Package · RubyGems

solidus_backend

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.3
    CVE-2022-31000

    CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

    solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's adjustment…

    solidusio solidus solidus_backend RubyGems