CVE-2017-3211 MEDIUM

CVE-2017-3211: Centire Yopify leaks customer information

Vendor Centire
Product Yopify
Weakness CWE-213
Published January 15, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization.

Key dates

02Disclosure timeline

January 15, 2020 CVE published
September 17, 2024 Record updated