Mirumee Saleor
4 CVEs affecting Mirumee Saleor. Latest disclosed: 2020-06-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13594 | High | 8.8 | 2019-07-14 | In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid… |
CVE-2020-15085 | Medium | 6.9 | 2020-06-30 | In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, incl… |
CVE-2020-7964 | Medium | 5.3 | 2020-01-24 | An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their c… |
CVE-2019-1010304 | Medium | 5.3 | 2019-07-15 | Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorr… |