Smartstore vulnerabilities

Products

• Smartstorenet 5
• Smartstore 3

Newest

• smartstore smartstorenet Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache,... CVE-2020-36365 6.1 MediumMay 19, 2021
• smartstore smartstorenet An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration... CVE-2020-36364 9.1 CriticalMay 19, 2021
• smartstore An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages... CVE-2021-32607 EPSS 33.4% 9.8 CriticalMay 12, 2021
• smartstore An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials... CVE-2021-32608 EPSS 33.4% 9.8 CriticalMay 12, 2021
• smartstore smartstorenet An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account… CVE-2020-27997 8.8 HighFebruary 19, 2021
• smartstore smartstorenet An issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttribute decoration in certain ModelBase.CustomProperties situations. CVE-2020-27996 8.8 HighOctober 29, 2020
• smartstore, smartstore smartstorenet +1 more WebApi Authentication attribute missing in Smartstore CVE-2020-15243 9.1 CriticalOctober 8, 2020