Skip to content
OpenAdvisories

Product · solidusio

solidus

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-43846

    CSRF forgery protection bypass for Spree::OrdersController#populate

    `solidus_frontend` is the cart and storefront for the Solidus e-commerce project. Versions of `solidus_frontend` prior to 3.1.5, 3.0.5, and 2.11.14 contain a cross-site request forgery (CSRF) vulnerability that allows a malicious site to add an item to the us…

    solidusio solidus solidus_frontend RubyGems
  • Medium 5.3
    CVE-2020-15109

    Ability to change order address without triggering address validations in solidus

    In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there is an bility to change order address without triggering address validations. This vulnerability allows a malicious customer to craft request data with parameters that allow changing the address of the…

    solidusio solidus solidus_frontend solidus_api RubyGems