CVE-2022-33077
An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint.
Published: 2022-10-19 · CVSS: 7.5 · CVSS 3.1
An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7