Packagist (Composer) package
oxid-esales/paymorrow-module
pkg:composer/oxid-esales/paymorrow-module
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-14020 | Med | 5.3 | >= 1.0.0, < 1.0.2 | 1.0.2 | Aug 20, 2018 | An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the deliver |
- affected >= 1.0.0, < 1.0.2fixed 1.0.2
An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the deliver