Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-29888

Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue has been patched in versions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.6%
CVSS Severity
CVSS v3 Score 4.2
References
Products affected by CVE-2024-29888
  • Saleor » Saleor » Version: 3.14.56
    cpe:2.3:a:saleor:saleor:3.14.56
  • Saleor » Saleor » Version: 3.14.57
    cpe:2.3:a:saleor:saleor:3.14.57
  • Saleor » Saleor » Version: 3.14.58
    cpe:2.3:a:saleor:saleor:3.14.58
  • Saleor » Saleor » Version: 3.14.59
    cpe:2.3:a:saleor:saleor:3.14.59
  • Saleor » Saleor » Version: 3.14.60
    cpe:2.3:a:saleor:saleor:3.14.60
  • Saleor » Saleor » Version: 3.15.31
    cpe:2.3:a:saleor:saleor:3.15.31
  • Saleor » Saleor » Version: 3.15.32
    cpe:2.3:a:saleor:saleor:3.15.32
  • Saleor » Saleor » Version: 3.15.33
    cpe:2.3:a:saleor:saleor:3.15.33
  • Saleor » Saleor » Version: 3.15.34
    cpe:2.3:a:saleor:saleor:3.15.34
  • Saleor » Saleor » Version: 3.15.35
    cpe:2.3:a:saleor:saleor:3.15.35
  • Saleor » Saleor » Version: 3.15.36
    cpe:2.3:a:saleor:saleor:3.15.36
  • Saleor » Saleor » Version: 3.16.27
    cpe:2.3:a:saleor:saleor:3.16.27
  • Saleor » Saleor » Version: 3.16.28
    cpe:2.3:a:saleor:saleor:3.16.28
  • Saleor » Saleor » Version: 3.16.29
    cpe:2.3:a:saleor:saleor:3.16.29
  • Saleor » Saleor » Version: 3.16.30
    cpe:2.3:a:saleor:saleor:3.16.30
  • Saleor » Saleor » Version: 3.16.31
    cpe:2.3:a:saleor:saleor:3.16.31
  • Saleor » Saleor » Version: 3.16.32
    cpe:2.3:a:saleor:saleor:3.16.32
  • Saleor » Saleor » Version: 3.16.33
    cpe:2.3:a:saleor:saleor:3.16.33
  • Saleor » Saleor » Version: 3.17.25
    cpe:2.3:a:saleor:saleor:3.17.25
  • Saleor » Saleor » Version: 3.17.26
    cpe:2.3:a:saleor:saleor:3.17.26
  • Saleor » Saleor » Version: 3.17.27
    cpe:2.3:a:saleor:saleor:3.17.27
  • Saleor » Saleor » Version: 3.17.28
    cpe:2.3:a:saleor:saleor:3.17.28
  • Saleor » Saleor » Version: 3.17.29
    cpe:2.3:a:saleor:saleor:3.17.29
  • Saleor » Saleor » Version: 3.17.30
    cpe:2.3:a:saleor:saleor:3.17.30
  • Saleor » Saleor » Version: 3.17.31
    cpe:2.3:a:saleor:saleor:3.17.31
  • Saleor » Saleor » Version: 3.18.19
    cpe:2.3:a:saleor:saleor:3.18.19
  • Saleor » Saleor » Version: 3.18.20
    cpe:2.3:a:saleor:saleor:3.18.20
  • Saleor » Saleor » Version: 3.18.21
    cpe:2.3:a:saleor:saleor:3.18.21
  • Saleor » Saleor » Version: 3.18.22
    cpe:2.3:a:saleor:saleor:3.18.22
  • Saleor » Saleor » Version: 3.18.23
    cpe:2.3:a:saleor:saleor:3.18.23
  • Saleor » Saleor » Version: 3.18.24
    cpe:2.3:a:saleor:saleor:3.18.24
  • Saleor » Saleor » Version: 3.18.25
    cpe:2.3:a:saleor:saleor:3.18.25
  • Saleor » Saleor » Version: 3.18.26
    cpe:2.3:a:saleor:saleor:3.18.26
  • Saleor » Saleor » Version: 3.18.27
    cpe:2.3:a:saleor:saleor:3.18.27
  • Saleor » Saleor » Version: 3.19.10
    cpe:2.3:a:saleor:saleor:3.19.10
  • Saleor » Saleor » Version: 3.19.11
    cpe:2.3:a:saleor:saleor:3.19.11
  • Saleor » Saleor » Version: 3.19.12
    cpe:2.3:a:saleor:saleor:3.19.12
  • Saleor » Saleor » Version: 3.19.13
    cpe:2.3:a:saleor:saleor:3.19.13
  • Saleor » Saleor » Version: 3.19.14
    cpe:2.3:a:saleor:saleor:3.19.14
  • Saleor » Saleor » Version: 3.19.5
    cpe:2.3:a:saleor:saleor:3.19.5
  • Saleor » Saleor » Version: 3.19.6
    cpe:2.3:a:saleor:saleor:3.19.6
  • Saleor » Saleor » Version: 3.19.7
    cpe:2.3:a:saleor:saleor:3.19.7
  • Saleor » Saleor » Version: 3.19.8
    cpe:2.3:a:saleor:saleor:3.19.8
  • Saleor » Saleor » Version: 3.19.9
    cpe:2.3:a:saleor:saleor:3.19.9


Contact Us

Shodan ® - All rights reserved