CVE-2024-29036

Summary

CVE-2024-29036 is a vulnerability affecting Saleor Storefront, an e-commerce software. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, the software incorrectly handled user authentication. Specifically, when any user logs in, their session data becomes accessible to anonymous users through cache. This leak can potentially expose sensitive user information. To mitigate this issue, users should upgrade to a version that includes commit 579241e75a5eb332ccf26e0bcdd54befa33f4783 or later. A temporary workaround involves disabling authentication by modifying the use of `createSaleorAuthClient()`.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.