CVE-2020-7964

An issue was discovered in Mirumee Saleor 2.x before 2.9.1

published January 24, 2020

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01092 · 65.1th percentile
Published
2020-01-24T19:38Z
EPSS history
Timeline
  • 24 JAN 19:38Z
    An issue was discovered in Mirumee Saleor 2.x before 2.9.1
    cvelistv5