CVE-2024-29036
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-29036 is a vulnerability affecting Saleor Storefront, an e-commerce software. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, the software incorrectly handled user authentication. Specifically, when any user logs in, their session data becomes accessible to anonymous users through cache. This leak can potentially expose sensitive user information. To mitigate this issue, users should upgrade to a version that includes commit 579241e75a5eb332ccf26e0bcdd54befa33f4783 or later. A temporary workaround involves disabling authentication by modifying the use of `createSaleorAuthClient()`.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions