Skip to content
OpenAdvisories

Vendor

Shopizer

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    Shopizer through 3.2.5 Authorization Bypass via Product Review customerId

    Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to pub…