CVE-2024-58248
nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.
Original description
The description as published by the source.
nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web github.com
- web nopcommerce.com