CVE Feed

    Dashboard / CVE / CVE-2024-29888

    CVE-2024-29888

    Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue has been patched in versions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`.

    Published:Mar 27, 2024
    Last Modified:Jan 8, 2026
    EPS:Mar 27, 2024
    EPSS Score:0.00543
    CVSS Score:4.2

    Affected Products

    Vendor
    Saleor
    Product
    Saleor

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-44472 (CVSS 8.1) — Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation f…
    CVE-2026-48744 (CVSS 6.5) — Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization che…
    CVE-2026-39851 (CVSS 5.3) — Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, the requestE…
    CVE-2026-35407 (CVSS 5.9) — Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a business-l…
    CVE-2026-35401 (CVSS 7.5) — Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a malicious a…
    CVE-2026-33756 (CVSS 7.5) — Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor suppor…
    CVE-2026-24136 (CVSS 8.7) — Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.22.0-a.0 t…
    CVE-2026-23499 (CVSS 8.5) — Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.…
    CVE-2026-22849 (CVSS 7.2) — Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.…
    CVE-2025-58442 (CVSS 5.3) — Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain …

    References

    https://github.com/saleor/saleor/commit/22a1aa3ef0bc54156405f69146788016a7f3f761
    https://github.com/saleor/saleor/commit/39abb0f4e4fe6503f81bfbb871227e4f70bcdd5c
    https://github.com/saleor/saleor/commit/47cedfd7d6524d79bdb04708edcdbb235874de6b
    https://github.com/saleor/saleor/commit/997f7ea4f576543ec88679a86bfe1b14f7f2ff26
    https://github.com/saleor/saleor/commit/b7cecda8b603f7472790150bb4508c7b655946d4
    https://github.com/saleor/saleor/commit/d8ba545c16ad3153febc5b5be8fd2ef75da9fc95
    https://github.com/saleor/saleor/commit/dccc2c842b4e2e09470929c80f07dc137e439182
    https://github.com/saleor/saleor/commit/ef003c76a304c89ddb2dc65b7f1d5b3b2ba1c640
    https://github.com/saleor/saleor/pull/15694
    https://github.com/saleor/saleor/pull/15697
    https://github.com/saleor/saleor/security/advisories/GHSA-mrj3-f2h4-7w45
    https://github.com/saleor/saleor/commit/22a1aa3ef0bc54156405f69146788016a7f3f761
    https://github.com/saleor/saleor/commit/39abb0f4e4fe6503f81bfbb871227e4f70bcdd5c
    https://github.com/saleor/saleor/commit/47cedfd7d6524d79bdb04708edcdbb235874de6b
    https://github.com/saleor/saleor/commit/997f7ea4f576543ec88679a86bfe1b14f7f2ff26
    https://github.com/saleor/saleor/commit/b7cecda8b603f7472790150bb4508c7b655946d4
    https://github.com/saleor/saleor/commit/d8ba545c16ad3153febc5b5be8fd2ef75da9fc95
    https://github.com/saleor/saleor/commit/dccc2c842b4e2e09470929c80f07dc137e439182
    https://github.com/saleor/saleor/commit/ef003c76a304c89ddb2dc65b7f1d5b3b2ba1c640
    https://github.com/saleor/saleor/pull/15694
    https://github.com/saleor/saleor/pull/15697
    https://github.com/saleor/saleor/security/advisories/GHSA-mrj3-f2h4-7w45

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High