Vulnerabilities > Nebulab > Solidus > 3.0.4

DATE CVE VULNERABILITY TITLE RISK
2022-06-01 CVE-2022-31000 Cross-Site Request Forgery (CSRF) vulnerability in Nebulab Solidus
solidus_backend is the admin interface for the Solidus e-commerce framework.
network
nebulab CWE-352
4.3
2021-12-20 CVE-2021-43846 Cross-Site Request Forgery (CSRF) vulnerability in Nebulab Solidus
`solidus_frontend` is the cart and storefront for the Solidus e-commerce project.
network
nebulab CWE-352
4.3