Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-50945
7.5
HIGHCVSS v3
Published
December 27, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.
simplcommerce/SimplCommerce
GitHubA simple, cross platform, modulith ecommerce system built on .NET
GitHubA simple, cross platform, modulith ecommerce system built on .NETNVD