Description
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mickasmt | next-saas-stripe-starter | 1.0.0 | — |
References
- VDB-352374 | mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error vdb-entry technical-description
- VDB-352374 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #774804 | mickasmt next-saas-stripe-starter 1.0.0 Business Logic Errors third-party-advisory