Security Advisory
CVE-2022-33077
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customers address via the addressedit endpoint.