solidusio vulnerabilities
5 published CVEs name solidusio among the affected products.
- Published CVEs
- 5
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 1Medium 2Low 1Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20213
- 20221
Newest CVEs
- CVE-2022-31000
CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend
solidusio · solidus
Low2.3 - CVE-2021-43846
CSRF forgery protection bypass for Spree::OrdersController#populate
solidusio · solidus
Medium5.3 - CVE-2021-43805
ReDos vulnerability on guest checkout email validation
solidusio · solidus
High7.5 - CVE-2021-41274
Authentication Bypass by CSRF Weakness
solidusio · solidus_auth_devise
Critical9.3 - CVE-2020-15109
Ability to change order address without triggering address validations in solidus
solidusio · solidus
Medium5.3