Unrated

Shopizer - IDOR delete superadmin

CVE-2022-23061 First seen on SecPulse May 1, 2022

Original description The description as published by the source.

In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web whitesourcesoftware.com

Key facts

Severity: Unrated
Published: May 1, 2022
First seen on SecPulse: May 1, 2022
CWE: CWE-639

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:56