Skip to content
OpenAdvisories

Vendor

saleor

21 known vulnerabilities.

Products

saleor 17 saleor/saleor 1 storefront 1 requests-hardened 1 saleor/react-storefront 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-39275 Public exploit

    Improper object type validation in saleor

    Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. This vulnerability can…

    saleor saleor