Stripe vulnerabilities
We track 3 vulnerabilities in Stripe products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2024.
Latest Stripe vulnerabilities
- 7.1 High severity
stripe-cli: Improper Limitation of a Pathname to a Restricted Directory
stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the -
- 9.8 Critical severity
Stripe Payment Pro: Improper Neutralization of Special Elements used in an SQL Command
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and e
- 7.0 High severity
stripe-cli: Improper Neutralization of Special Elements used in an OS Command
Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe