AbdullahAlmutawa/CVE-2024-50945

AbdullahAlmutawa/CVE-2024-50945

GitHubGitHub
GitHubgithub.com
Releases0
SimplCommerce is affected by a Broken Access Control vulnerability in the review system, allowing unauthorized users to post reviews for products they have not purchased.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-50945↗
7.5 HIGH—

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.