Description (CNA)
Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A forged request riding a victim's active checkout session could silently overwrite the billing or shipping address before order confirmation — the most consequential sub-case, since it opens the door to redirecting a paid order's goods to an attacker-controlled address — or tamper with a saved profile address via `saveAddress()`. As before, each forged request executes with only the victim's own session privileges, so there is no cross-account data access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| j2commerce.com / J2Store extension for Joomla | affected 1.0.0-3.3.22; affected 4.0.0-4.0.22; affected 4.1.0-4.1.7 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.
No references supplied.