saleor Missing Authorization vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-0932 · ADVISORY
• saleor/saleor commit 521dfd6 · WEB
• saleor/saleor · PACKAGE
• huntr.dev/bounties/88ae4cbc-c697-401b-8b04-7dc4e03ad8eb · WEB
• pypi.org/project/saleor · PACKAGE
• GitHub Advisory GHSA-mcgw-5fhw-3fq8 · ADVISORY

saleor 的其他漏洞

• CVE-2024-29888中危 5.4Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery me…
• CVE-2023-26052中危 5.3Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handle…
• CVE-2023-26051中危 4.3Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handle…
• CVE-2020-7964中危 5.3An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attacker…
• CVE-2019-13594高危 8.8In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST reque…