VendorsNebulabsolidusany version
Vulnerabilities

Nebulab Solidus any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-43805
ReDos vulnerability on guest checkout email validation
Published 2021-12-07 · Modified
7.5EPSS 0.014
CVE-2020-15109
Ability to change order address without triggering address validations in solidus
Published 2020-08-04 · Modified
5.3EPSS 0.009
CVE-2021-43846
CSRF forgery protection bypass for Spree::OrdersController#populate
Published 2021-12-20 · Modified
5.3EPSS 0.006
CVE-2022-31000
CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend
Published 2022-06-01 · Modified
4.3EPSS 0.004