Junglewise Threat Intelligence

CVE-2021-32720: List of order ids, number, items total and token value exposed for unauthorized uses via new API

CVE-2021-32720 · Severity: low · CVSS 3.1 · Published 2021-06-29

Technologies: sylius/sylius (Packagist). Vendors: Packagist.

Executive brief

List of order ids, number, items total and token value exposed for unauthorized uses via new API

Affected products

  • Packagist sylius/sylius

Related threats