← All advisories

High severity7.5NVD Advisory· Published Oct 19, 2022· Updated Jul 9, 2026

CVE-2022-33077

CVE-2022-33077

Description

An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

nopcommerce/nopcommercedescription
Nopcommerce/nopcommercellm-create2 versions
=4.50.2+ 1 more
- (no CPE)range: =4.50.2
- cpe:2.3:a:nopcommerce:nopcommerce:*:*:*:*:*:*:*:*range: <=4.50.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.