Skip to content
OpenAdvisories

Vendor

bagisto

13 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.7

    Bagisto before 2.3.16 and 2.4.x before 2.4.1 Race Condition in Coupon Usage Accounting

    Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in manageCartRule() that allows attackers to redeem single-use coupons multiple times. Attackers can submit concurrent order requests to the onepage orders checkout endpoint,…