Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rccx-mffc-xm8j

Опубликовано: 22 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 3.1

Описание

A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult.

A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult.

EPSS

Процентиль: 1%
0.00008
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 3.1
nvd
18 дней назад

A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult.

EPSS

Процентиль: 1%
0.00008
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-285