CVE-2024-29888
—CVSS 3.1
5.4 medium
EPSS
<1%p43
Published
()
Modified
Description
Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue has been patched in versions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`.
- Vendors
- saleor
- Products
- saleor
- Weakness
- CWE-359
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.