saleor Missing Authorization vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-0932 · ADVISORY
• saleor/saleor commit 521dfd6 · WEB
• saleor/saleor · PACKAGE
• huntr.dev/bounties/88ae4cbc-c697-401b-8b04-7dc4e03ad8eb · WEB
• pypi.org/project/saleor · PACKAGE
• GitHub Advisory GHSA-mcgw-5fhw-3fq8 · ADVISORY

saleor의 다른 취약점

• CVE-2024-29888보통 5.4Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery me…
• CVE-2023-26052보통 5.3Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handle…
• CVE-2023-26051보통 4.3Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handle…
• CVE-2020-7964보통 5.3An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attacker…
• CVE-2019-13594높음 8.8In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST reque…