CVE-2018-14020

An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop

published August 20, 2018

CVSS
—
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01082 · 64.9th percentile
Published
2018-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop
    cvelistv5