Vulnerabilities > Nebulab > Solidus > 3.1.2

DATE CVE VULNERABILITY TITLE RISK
2022-06-01 CVE-2022-31000 Cross-Site Request Forgery (CSRF) vulnerability in Nebulab Solidus
solidus_backend is the admin interface for the Solidus e-commerce framework.
network
nebulab CWE-352
4.3
2021-12-20 CVE-2021-43846 Cross-Site Request Forgery (CSRF) vulnerability in Nebulab Solidus
`solidus_frontend` is the cart and storefront for the Solidus e-commerce project.
network
nebulab CWE-352
4.3
2021-12-07 CVE-2021-43805 Unspecified vulnerability in Nebulab Solidus
Solidus is a free, open-source ecommerce platform built on Rails.
network
low complexity
nebulab
5.0