Threats tagged 'ghsa-chw3-wcrj-gqxx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.3	CVE-2026-128042OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart Medium6.32026-11-13GCVE DatabaseCVE-2026-128042 OpenMage magento-lts versions before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contain a race condition vulnerability in the shopping cart price rule usage limits. This flaw arises because the coupon usage counters are checked and incremented without proper locking, allowing unauthenticated attackers, including guest users, to redeem limited-use coupons more times than intended. Report on CVE-2026-128042 Vulnerability CWE-362 #ghsa-chw3-wcrj-gqxx	GCVE Database	2026-11-13

Page 1 of 1