spree_api vulnerabilities (RubyGems)
4 vulnerabilities.
-
spree_apiRubyGems Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) 7.1 High -
spree_apiRubyGems Spree allows unauthenticated users can access all guest addresses 7.7 High -
spree_apiRubyGems Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification 6.5 Medium -
spree_apiRubyGems Authorization bypass in Spree 7.7 High