Business Logic Errors in microweber
Low severity
GitHub Reviewed
Published
Feb 21, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Feb 20, 2022
Published to the GitHub Advisory Database
Feb 21, 2022
Reviewed
Feb 25, 2022
Last updated
Feb 3, 2023
Microweber prior to 1.2.11 can suffer from insecure direct object reference(s). A malicious actor can remove items from a victim's cart.
References