CVE-2026-18029
2026-07-28
11h17 +00:00
11h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Our payment integration with GiroCheckout did not properly validate
payment status responses. An attacker could use a successful payment
status response from one payment and supply it to the system for a
different payment, gaining access to multiple valid tickets with only
one payment.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Enforcement of Behavioral Workflow The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe. |
