CVE-2018-14020

Name of the Vulnerable Software and Affected Versions Paymorrow module versions 1.0.0 through 1.0.1 Paymorrow module versions 2.0.0

Description The issue allows an attacker to bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. This can be done by changing the delivery address to one that is not verified by the Paymorrow module.

Recommendations For Paymorrow module versions 1.0.0 through 1.0.1, update to version 1.0.2 to resolve the issue. For Paymorrow module version 2.0.0, update to version 2.0.1 to resolve the issue.