mirumee records

4 published records for vendor mirumee.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-13594No exploit	In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST requemirumee · saleor · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Jul 14, 2019
24Monitor	CVE-2020-15085No exploit	Client caching login operation with plaintext password in Saleor Storefrontmirumee · saleor · CWE-312	Medium6.1	—	0.5%	Jun 30, 2020
21Monitor	CVE-2019-1010304No exploit	Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c.mirumee · saleor · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.1%	Jul 15, 2019
21Monitor	CVE-2020-7964No exploit	An issue was discovered in Mirumee Saleor 2.x before 2.9.1.mirumee · saleor · CWE-306 Pre-auth Auth bypass	Medium5.3	—	1.0%	Jan 24, 2020

CVE-2019-13594
35Monitor
In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST reque
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
mirumee · saleorJul 14, 2019
CVE-2020-15085
24Monitor
Client caching login operation with plaintext password in Saleor Storefront
MediumCVSS 6.1No exploitEPSS 0%
mirumee · saleorJun 30, 2020
CVE-2019-1010304
21Monitor
Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
mirumee · saleorJul 15, 2019
CVE-2020-7964
21Monitor
An issue was discovered in Mirumee Saleor 2.x before 2.9.1.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Auth bypass
mirumee · saleorJan 24, 2020