CVE-2020-12101

Description

The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an address.

Weakness classification

• nvd@nist.gov: CWE-276

Primary references

• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Exploit, Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory