Spree vulnerabilities
Products
- Spree 7
Newest
- spree Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) 7.1 High
- spree Spree allows unauthenticated users can access all guest addresses 7.7 High
- spree Unauthenticated Spree Commerce users can view completed guest orders by Order ID 7.7 High
- spree Spree API has Unauthenticated IDOR - Guest Address 7.5 High
- spree Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification 6.5 Medium
- spree auth devise, spreecommerce spree auth devise +1 more Authentication Bypass by CSRF Weakness 9.3 Critical
- spree Authorization bypass in Spree 7.7 High
- sparksolutions spree Expired token reuse in Spree 7.4 High