Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.

Description

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nopCommerce nopCommerce

Default version status: unaffected

  • 0 to < 4.80.0affected

References