VYPR

Cezerin

by Cezerin

CVEs (1)

  • CVE-2019-18608Oct 29, 2019
    risk 0.00cvss epss 0.00

    Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order (e.g., its payment status or shipping fee) by…