CVE-2024-58248

Published
View on NVD ↗
CVSS v3
3.5
LOW
CVSS v2
N/A
Affected
1
PROJECT

Description

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.

ASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.
GitHubGitHub
10.1K