Vulnerability Details CVE-2024-29888
Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue has been patched in versions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.6%
CVSS Severity
CVSS v3 Score 4.2
Products affected by CVE-2024-29888
-
cpe:2.3:a:saleor:saleor:3.14.56
-
cpe:2.3:a:saleor:saleor:3.14.57
-
cpe:2.3:a:saleor:saleor:3.14.58
-
cpe:2.3:a:saleor:saleor:3.14.59
-
cpe:2.3:a:saleor:saleor:3.14.60
-
cpe:2.3:a:saleor:saleor:3.15.31
-
cpe:2.3:a:saleor:saleor:3.15.32
-
cpe:2.3:a:saleor:saleor:3.15.33
-
cpe:2.3:a:saleor:saleor:3.15.34
-
cpe:2.3:a:saleor:saleor:3.15.35
-
cpe:2.3:a:saleor:saleor:3.15.36
-
cpe:2.3:a:saleor:saleor:3.16.27
-
cpe:2.3:a:saleor:saleor:3.16.28
-
cpe:2.3:a:saleor:saleor:3.16.29
-
cpe:2.3:a:saleor:saleor:3.16.30
-
cpe:2.3:a:saleor:saleor:3.16.31
-
cpe:2.3:a:saleor:saleor:3.16.32
-
cpe:2.3:a:saleor:saleor:3.16.33
-
cpe:2.3:a:saleor:saleor:3.17.25
-
cpe:2.3:a:saleor:saleor:3.17.26
-
cpe:2.3:a:saleor:saleor:3.17.27
-
cpe:2.3:a:saleor:saleor:3.17.28
-
cpe:2.3:a:saleor:saleor:3.17.29
-
cpe:2.3:a:saleor:saleor:3.17.30
-
cpe:2.3:a:saleor:saleor:3.17.31
-
cpe:2.3:a:saleor:saleor:3.18.19
-
cpe:2.3:a:saleor:saleor:3.18.20
-
cpe:2.3:a:saleor:saleor:3.18.21
-
cpe:2.3:a:saleor:saleor:3.18.22
-
cpe:2.3:a:saleor:saleor:3.18.23
-
cpe:2.3:a:saleor:saleor:3.18.24
-
cpe:2.3:a:saleor:saleor:3.18.25
-
cpe:2.3:a:saleor:saleor:3.18.26
-
cpe:2.3:a:saleor:saleor:3.18.27
-
cpe:2.3:a:saleor:saleor:3.19.10
-
cpe:2.3:a:saleor:saleor:3.19.11
-
cpe:2.3:a:saleor:saleor:3.19.12
-
cpe:2.3:a:saleor:saleor:3.19.13
-
cpe:2.3:a:saleor:saleor:3.19.14
-
cpe:2.3:a:saleor:saleor:3.19.5
-
cpe:2.3:a:saleor:saleor:3.19.6
-
cpe:2.3:a:saleor:saleor:3.19.7
-
cpe:2.3:a:saleor:saleor:3.19.8
-
cpe:2.3:a:saleor:saleor:3.19.9