CVE-2019-16403
CVE-2019-16403
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.
CVSS 8.8 · High · EPSS 1.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
bagisto/bagisto Packagist
- Versions
- v0.1.0
- v0.1.1
- v0.1.2
- v0.1.3
- v0.1.4
- v0.1.4-BETA1
- v0.1.4-BETA2
- v0.1.4-BETA3
- v0.1.4-BETA4
- Affected ranges
- ECOSYSTEM: < 0.1.5
Update to 0.1.5