CVE-2022-23061

In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.
Configurations

Configuration 1

cpe:2.3:a:shopizer:shopizer:*:*:*:*:*:*:*:*

Information

Published : 2022-05-01 01:15

Updated : 2022-05-09 05:37


NVD link : CVE-2022-23061

Mitre link : CVE-2022-23061

Products Affected
No products.
CWE