Vendure-ecommerce vulnerabilities
We track 1 vulnerability in Vendure-ecommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Vendure-ecommerce vulnerabilities
- 9.1 Critical severity
Vendure is an open-source headless commerce platform.
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitr