Skip to content
OpenAdvisories

Vendor

mirumee

1 known vulnerabilities.

Products

saleor-storefront 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2020-15085

    Client caching login operation with plaintext password in Saleor Storefront

    In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and pa…

    mirumee saleor-storefront