Read the docs

Paypal-ipn Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Paypal-ipn Project records in CISA KEV

No Paypal-ipn Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Paypal-ipn 1 record LOW

Records

1 record

TI-2014-08223 CVE-2014-10067 · GHSA-h698-r4hm-w94p

Improper authentication in HackerOne paypal-ipn node module

Priority LOW 29

paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01129 Published 2018-05-29 Fixed in 3.0.0 CWE-287
Open these records in search →