Solidusio Solidus vulnerabilities
- solidus Solidus <= 4.3.4 is affected by a Stored Cross-Site Scripting vulnerability in the order tracking... 5.7 Medium
- nebulab solidus CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend 2.3 Low
- nebulab solidus CSRF forgery protection bypass for Spree::OrdersController#populate 5.3 Medium
- nebulab solidus ReDos vulnerability on guest checkout email validation 7.5 High
- nebulab solidus auth devise Authentication Bypass by CSRF Weakness 9.3 Critical
- nebulab solidus Ability to change order address without triggering address validations in solidus 5.3 Medium