CVE-2019-16403

MEDIUM

Description

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

References

https://github.com/bagisto/bagisto/issues/749

Details

Source: MITRE

Published: 2019-09-18

Updated: 2019-09-19

Type: CWE-863

Risk Information

CVSS v2.0

Base Score: 6.5

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8

Severity: MEDIUM