In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade spree_frontend
to version 3.0.7 or higher.
spree_frontend
is Frontend e-commerce functionality for the Spree project.
Affected versions of the package are vulnerable to Json Hijacking, due to returning a top level array, making the JSON interpreted as valid javascript.