← Back

Sparksolutions

sparksolutions

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Spree
spree
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15269
1Sparksolutions
1Spree
Jun 17, 2026
Oct 20, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is des...Show more
In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is described in the linked advisory.Show less