CVE-2008-7310 Spree does not properly restrict the use of a hash to provide values for a model's attributes
MediumCVSS 5.0
EPSS 1.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems spree(RubyGems) | < 0.4.0 | 0.4.0 |
| rubygems spree(RubyGems) | = 0.0.5 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.6 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.7 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.8 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.9 | No fix listed |
| rubygems spree(RubyGems) | = 0.2.0 | No fix listed |
| spreecommerce spree | = 0.2.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- web.archive.org
- web.archive.org
- github.com exploit
- spreecommerce.com
- railspikes.com
- spreecommerce.com vendor-advisory
- github.com
- github.com product