spree vulnerabilities

CVEs whose affected-version data names the spree package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2011-10019Critical· 9.8PoC

1y ago

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked …

▾ Abyssalspreecommerce · spreeEPSS 5.8%via NVD