CVE-2020-7964: Missing Authentication for Critical Function in Saleor
Summary
CVE-2020-7964: Missing Authentication for Critical Function in Saleor. Affects saleor versions >= 2.0.0, < 2.9.1. Fixed in 2.9.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Saleor is an open-source e-commerce platform built with Python and Django. It provides a comprehensive set of features for creating online stores. The vulnerability in Saleor allows attackers to attach their checkouts to any user ID, leading to the leakage of sensitive user data such as name, address, and previous orders of other customers.
Vulnerability Detail
The vulnerability arises from incorrect access control in the checkoutCustomerAttach mutations of Saleor. This flaw enables attackers to associate their checkouts with any user ID, bypassing authentication and authorization mechanisms. As a result, they can access and retrieve sensitive information belonging to other customers, compromising their privacy and potentially leading to identity theft or other malicious activities.
How To Fix
Minimum fixed version
2.9.1
This is the first release that contains the fix.
pip install --upgrade "saleor==2.9.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to Saleor version 2.9.1 or later.
Conclusion
The vulnerability in Saleor allows attackers to associate their checkouts with any user ID, resulting in the exposure of sensitive user data. To mitigate this issue, it is crucial to upgrade to Saleor version 2.9.1 or later. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for saleor →
FAQ
Saleor is an open-source e-commerce platform developed with Python and Django. It offers a wide range of features for building online stores.
The vulnerability allows attackers to attach their checkouts to any user ID, leading to the exposure of sensitive user data belonging to other customers.
To fix this vulnerability, you should upgrade to Saleor version 2.9.1 or later.
No, there is no known workaround for this vulnerability. Upgrading to the latest version is the recommended solution.
You can find more information about this vulnerability in the official Saleor documentation or by contacting the Saleor development team.
References
Related vulnerabilities
Recent vulnerabilities recorded for saleor.
