Threats tagged 'ghsa-5699-fg78-p55h'

OpenMage Magento-LTS versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 have an authorization bypass vulnerability in the /rss/order/status feed. The vulnerability arises because the URL key is an unsigned Base64-encoded JSON containing order, increment, and customer IDs. This allows unauthenticated attackers to forge keys by enumerating sequential IDs and access other customers' order details, including names, items, prices, totals, and status comments, when the order-status RSS feed is enabled.