Advisories · Technology

Shop Beat studio.

Every CVE that names Shop Beat studio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36250 CVE record

CVSS 8.8 High

Cross Site Request Forgery on Shop Beat Services
- Shop Beat studio
- Cross-site request forgery (CSRF)
Not analysed yet 30 May 2023
CVE-2022-36249 CVE record

CVSS 5.4 Medium

Shop Beat Services Vulnerable To Bypass 2FA via APIs
- Shop Beat studio
- Authentication bypass
Not analysed yet 30 May 2023
CVE-2022-36247 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Shop Beat Services Vulnerable To IDOR
- Shop Beat studio
Not analysed yet 30 May 2023
CVE-2022-36246 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Shop Beat Services Vulnerable To Insecure Permissions
- Shop Beat studio
- CWE-264
Not analysed yet 30 May 2023
CVE-2022-36244 CVE record

CVSS 5.4 Medium

Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
- Shop Beat studio
- Cross-site scripting (XSS)
Not analysed yet 30 May 2023
CVE-2022-36243 CVE record

CVSS 5.3 Medium

Directory Traversal on Shop Beat Services
- Shop Beat studio
- CWE-548
Not analysed yet 30 May 2023