CVE-2008-7310 (spree): Spree Hash Restriction Weakness URL Parsing Order State Value Manipulation

September 22nd, 2008

ADVISORIES

GEM

SEVERITY

CVSS v2.0: 5.0 (Medium)

PATCHED VERSIONS

>= 0.3.0

DESCRIPTION

Spree contains a hash restriction weakness that occurs when parsing a modified URL. This may allow an attacker to manipulate order state values.