mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
35 lines
1.4 KiB
JSON
35 lines
1.4 KiB
JSON
[
|
|
{
|
|
"id": 1287565357,
|
|
"name": "CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR",
|
|
"full_name": "teteco\/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR",
|
|
"owner": {
|
|
"login": "teteco",
|
|
"id": 110571215,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110571215?v=4",
|
|
"html_url": "https:\/\/github.com\/teteco",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/teteco\/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR",
|
|
"description": "The VTEX Checkout Service exposes OrderForm data through the endpoints `\/api\/checkout\/pub\/orderForm\/{orderFormId}` and `\/attachments\/*`. These endpoints do not validate the tenant (store account) of the authenticated session against the ownership of the requested OrderForm.",
|
|
"fork": false,
|
|
"created_at": "2026-07-02T20:06:01Z",
|
|
"updated_at": "2026-07-09T18:09:28Z",
|
|
"pushed_at": "2026-07-09T18:08:48Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |