PT-2024-23111 · Saleor · Saleor

Nyankiyoshi · Published 2024-03-27 · Updated 2026-01-08 · CVE-2024-29888

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.14.61 Saleor versions prior to 3.15.37 Saleor versions prior to 3.16.34 Saleor versions prior to 3.17.32 Saleor versions prior to 3.18.28 Saleor versions prior to 3.19.15

Description The issue occurs when using Pickup: Local stock only click-and-collect as a delivery method in specific conditions, allowing the customer to overwrite the warehouse address with its own, which exposes its address as click-and-collect address.

Recommendations For versions prior to 3.14.61, upgrade to version 3.14.61 or later. For versions prior to 3.15.37, upgrade to version 3.15.37 or later. For versions prior to 3.16.34, upgrade to version 3.16.34 or later. For versions prior to 3.17.32, upgrade to version 3.17.32 or later. For versions prior to 3.18.28, upgrade to version 3.18.28 or later. For versions prior to 3.19.15, upgrade to version 3.19.15 or later. As a temporary workaround, consider turning off click-and-collect delivery method on warehouse view when Pickup option is set to Local stock only.

Exploit

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2024-29888

GHSA-MRJ3-F2H4-7W45

Affected Products

Saleor

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29888.json · Exploit
• https://github.com/saleor/saleor/commit/dccc2c842b4e2e09470929c80f07dc137e439182 · Patch
• https://github.com/saleor/saleor/commit/d8ba545c16ad3153febc5b5be8fd2ef75da9fc95 · Patch
• https://github.com/saleor/saleor/commit/47cedfd7d6524d79bdb04708edcdbb235874de6b · Patch
• https://github.com/saleor/saleor/commit/b7cecda8b603f7472790150bb4508c7b655946d4 · Patch
• https://github.com/saleor/saleor/commit/22a1aa3ef0bc54156405f69146788016a7f3f761 · Patch
• https://github.com/saleor/saleor/commit/ef003c76a304c89ddb2dc65b7f1d5b3b2ba1c640 · Patch
• https://github.com/saleor/saleor/commit/997f7ea4f576543ec88679a86bfe1b14f7f2ff26 · Patch
• https://github.com/saleor/saleor/commit/39abb0f4e4fe6503f81bfbb871227e4f70bcdd5c · Patch
• https://github.com/saleor/saleor/security/advisories/GHSA-mrj3-f2h4-7w45 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29888 · Security Note
• https://osv.dev/vulnerability/GHSA-mrj3-f2h4-7w45 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29888 · Vendor Advisory
• https://github.com/saleor/saleor/releases/tag/3.17.32 · Note
• https://github.com/saleor/saleor/releases/tag/3.15.37 · Note