What’s Vulnerable › Products

solidusio solidus vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your solidusio solidus version is affected

Latest solidusio solidus vulnerabilities

• CVE-2022-31000 — CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend (CVSS 4.3)
• CVE-2021-43846 — CSRF forgery protection bypass for Spree::OrdersController#populate (CVSS 4.3)
• CVE-2021-43805 — ReDos vulnerability on guest checkout email validation (CVSS 5.0)
• CVE-2020-15109 — Ability to change order address without triggering address validations in solidus (CVSS 5.3)