Description
nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nopCommerce | nopCommerce | < 4.80.0 | 4.80.0 |
Low · 3.5
CVE-2024-58248
EUVD-2025-11283GHSA-m83v-mmqj-7jrm
nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift card…
Published Apr 16, 2025 · Updated Oct 29, 2025 · Assigned by mitre