Security Advisory

CVE-2024-58248

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-16 00:00:00

Last updated 2025-10-29 14:27:40

Assigner mitre

CVSS score 3.5

State PUBLISHED

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.