Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-50945

Date: December 26, 2024

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.

Severity Score

Related Resources (5)

https://github.com/simplcommerce/SimplCommerce
https://www.simplcommerce.com/
https://github.com/AbdullahAlmutawa/CVE-2024-50945
https://nvd.nist.gov/vuln/detail/CVE-2024-50945
https://www.mend.io/vulnerability-database/CVE-2024-50945

Severity Score

Weakness Type (CWE)

Improper Access Control

CWE-284

Incorrect Authorization

CWE-863

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us