CyberSecBulletin

Foodcoopshop vulnerabilities

We track 1 vulnerability in Foodcoopshop products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Foodcoopshop vulnerabilities

  • 7.5 High severity

    foodcoopshop: Time-of-check Time-of-use (TOCTOU) Race Condition

    CVE-2023-46725Foodcoopshop

    FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the `/api/updateProducts.json` endpoint to mak