Sparksolutions

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sparksolutions records in CISA KEV

No Sparksolutions vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2020-12039 CVE-2020-15269 · GHSA-f8cm-364f-q9qh

MEDIUM 41

In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01064 Published 2020-10-20 Fixed in 3.7.11, 4.0.4 +1 CWE-287