high8.8
CVE-2020-27997
An issue was discovered in SmartStoreNET before 4.1.0.
Impact
An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartstore | Smartstorenet | before 4.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/smartstore/SmartStoreNET/compare/4.0.1...4.1.0
- https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET
- https://github.com/smartstore/SmartStoreNET/compare/4.0.1...4.1.0
- https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET