Advisories for Composer/Oxid-Esales/Paymorrow-Module package

2018

Improper Input Validation

An issue was discovered in the Paymorrow module for OXID eShop. An attacker can bypass delivery-address change detection if the payment module does not use eShop`s checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.