CVE-2020-12101

The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id…

published April 30, 2020

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01986 · 80.4th percentile
Published
2020-04-30T13:40Z
EPSS history
Timeline
  • 30 APR 13:40Z
    The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id…
    cvelistv5