PT-2020-12647
CVE-2020-11497
·
تاريخ النشر
2020-08-26
·
تاريخ التحديث
2020-09-01
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
NAB Transact extension version 2.1.0 for the WooCommerce plugin for WordPress
Description
An issue allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step, effectively bypassing the online payment system.
Recommendations
For NAB Transact extension version 2.1.0, update to a newer version that contains a fix for this issue, as assigning arbitrary bank transaction IDs could lead to unauthorized order fulfillment. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾