Log in Start free

solidusio

Products

ProductCVEsExploitedLatest
solidus4–Jun 1, 2022
solidus_auth_devise1–Nov 17, 2021

Exploited and recent CVEs

  • CVE-2022-31000 Low 2.3 CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend 0.4%
  • CVE-2021-43846 Medium 5.3 CSRF forgery protection bypass for Spree::OrdersController#populate 0.6%
  • CVE-2021-43805 High 7.5 ReDos vulnerability on guest checkout email validation 1.4%
  • CVE-2021-41274 Critical 9.3 Authentication Bypass by CSRF Weakness 0.7%
  • CVE-2020-15109 Medium 5.3 Ability to change order address without triggering address validations in solidus 1.0%