Authorization Bypass Through User-Controlled Key in Bagisto

ALTO 8.8CVE-2019-16403 · GHSA-pwrf-q7h8-jjr7 · Published 18/09/2019 · updated 17/06/2026

Em resumo

CVE-2019-16403 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta bagisto/bagisto, bagisto (webkul).
Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 72.4% das vulnerabilidades.
Correção: atualize para 0.1.5 ou posterior.

Package	Affected versions	Patched versions
bagisto/bagisto Packagist	`< 0.1.5`	`0.1.5`
bagisto webkul	`< 0.1.5`	`0.1.5`

Description

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

NVD description

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

References

nvd.nist.gov/vuln/detail/CVE-2019-16403 · ADVISORY
bagisto/bagisto · WEB

Mais vulnerabilidades de bagisto/bagisto

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bagisto/bagisto

Packagist

< 0.1.5

0.1.5

bagisto

webkul

< 0.1.5

0.1.5

Description

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

NVD description

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

Mais vulnerabilidades de bagisto/bagisto

Ver tudo →