Security Bulletin 2018-003

Originally published at: https://oxidforge.org/en/security-bulletin-2018-003.html

CVE Identifier: CVE-2018-14020: An attacker is able to change the delivery address by bypassing the checkout process when using Paymorrow payment method.