TI-2024-30450 CVE-2024-45401 · GHSA-fv4g-gwpj-74gr
stripe-cli Path Traversal vulnerability
Priority LOW 35
stripe-cli is a command-line tool for the payment processor Stripe.
Vulnerabilities
7 records
TI-2023-09188 CVE-2023-23315 · GHSA-ccxq-4rr7-hcmq
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection…
Priority HIGH 82
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5.
TI-2022-11731 CVE-2022-29188 · GHSA-qwrf-gfpj-qvj6
Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen
Priority LOW 36
Smokescreen is an HTTP proxy.
TI-2022-08638 CVE-2022-24825 · GHSA-gcj7-j438-hjj2
Smokescreen SSRF via deny list bypass
Priority LOW 34
Smokescreen is a simple HTTP proxy that fogs over naughty URLs.
TI-2022-08567 CVE-2022-24753 · GHSA-4cx6-fj7j-pjx9
Code injection in Stripe CLI on windows
Priority LOW 36
Stripe CLI is a command-line tool for the Stripe eCommerce platform.
Priority LOW 35
vscode-stripe is an extension for Visual Studio Code.
TI-2018-13662 CVE-2018-19249 · GHSA-vc85-2pc3-grvj
The Stripe API v1 allows remote attackers to bypass intended access restrictions by…
Priority LOW 36
The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card{}, and reading the cvc_check informa…