Insecure Direct Object Reference in WooCommerce Stripe Voucher Payment Intent Update

Skrevet den af i WooCommerce Stripe Payment Gateway

The Boleto and OXXO voucher gateways’ update-payment-intent AJAX endpoint accepted any order ID, protected only by a nonce printed on public pages, without checking the order key. An unauthenticated visitor could create or update a Stripe payment intent for another customer’s order and reset that order to pending payment. Fixed in 7.6.2.

This vulnerability affects the following application versions:

  • WooCommerce Stripe Payment Gateway 5.9.0
  • WooCommerce Stripe Payment Gateway 5.9.1
  • WooCommerce Stripe Payment Gateway 5.9.2
  • WooCommerce Stripe Payment Gateway 6.0.0
  • WooCommerce Stripe Payment Gateway 6.0.1
  • WooCommerce Stripe Payment Gateway 6.0.2
  • WooCommerce Stripe Payment Gateway 6.1.0
  • WooCommerce Stripe Payment Gateway 6.1.1
  • WooCommerce Stripe Payment Gateway 6.1.2
  • WooCommerce Stripe Payment Gateway 6.2.0
  • WooCommerce Stripe Payment Gateway 6.2.1
  • WooCommerce Stripe Payment Gateway 6.2.2
  • WooCommerce Stripe Payment Gateway 6.3.0
  • WooCommerce Stripe Payment Gateway 6.3.1
  • WooCommerce Stripe Payment Gateway 6.3.2
  • WooCommerce Stripe Payment Gateway 6.3.3
  • WooCommerce Stripe Payment Gateway 6.4.0
  • WooCommerce Stripe Payment Gateway 6.4.1
  • WooCommerce Stripe Payment Gateway 6.4.2
  • WooCommerce Stripe Payment Gateway 6.4.3
  • WooCommerce Stripe Payment Gateway 6.4.4
  • WooCommerce Stripe Payment Gateway 6.4.5
  • WooCommerce Stripe Payment Gateway 6.4.6
  • WooCommerce Stripe Payment Gateway 6.5.0
  • WooCommerce Stripe Payment Gateway 6.5.1
  • WooCommerce Stripe Payment Gateway 6.5.2
  • WooCommerce Stripe Payment Gateway 6.5.3
  • WooCommerce Stripe Payment Gateway 6.5.4
  • WooCommerce Stripe Payment Gateway 6.6.0
  • WooCommerce Stripe Payment Gateway 6.6.1
  • WooCommerce Stripe Payment Gateway 6.6.2
  • WooCommerce Stripe Payment Gateway 6.6.3
  • WooCommerce Stripe Payment Gateway 6.7.0
  • WooCommerce Stripe Payment Gateway 6.7.1
  • WooCommerce Stripe Payment Gateway 6.7.2
  • WooCommerce Stripe Payment Gateway 6.7.3
  • WooCommerce Stripe Payment Gateway 6.8.0
  • WooCommerce Stripe Payment Gateway 6.8.1
  • WooCommerce Stripe Payment Gateway 6.8.2
  • WooCommerce Stripe Payment Gateway 6.8.3
  • WooCommerce Stripe Payment Gateway 6.9.0
  • WooCommerce Stripe Payment Gateway 6.9.1
  • WooCommerce Stripe Payment Gateway 6.9.2
  • WooCommerce Stripe Payment Gateway 6.9.3
  • WooCommerce Stripe Payment Gateway 7.0.0
  • WooCommerce Stripe Payment Gateway 7.0.1
  • WooCommerce Stripe Payment Gateway 7.0.2
  • WooCommerce Stripe Payment Gateway 7.0.3
  • WooCommerce Stripe Payment Gateway 7.0.4
  • WooCommerce Stripe Payment Gateway 7.0.5
  • WooCommerce Stripe Payment Gateway 7.1.0
  • WooCommerce Stripe Payment Gateway 7.1.1
  • WooCommerce Stripe Payment Gateway 7.1.2
  • WooCommerce Stripe Payment Gateway 7.1.3
  • WooCommerce Stripe Payment Gateway 7.2.0
  • WooCommerce Stripe Payment Gateway 7.2.1
  • WooCommerce Stripe Payment Gateway 7.2.2
  • WooCommerce Stripe Payment Gateway 7.2.3
  • WooCommerce Stripe Payment Gateway 7.3.0
  • WooCommerce Stripe Payment Gateway 7.3.1
  • WooCommerce Stripe Payment Gateway 7.3.2
  • WooCommerce Stripe Payment Gateway 7.3.3
  • WooCommerce Stripe Payment Gateway 7.4.0
  • WooCommerce Stripe Payment Gateway 7.4.1
  • WooCommerce Stripe Payment Gateway 7.4.2
  • WooCommerce Stripe Payment Gateway 7.4.3
  • WooCommerce Stripe Payment Gateway 7.5.0
  • WooCommerce Stripe Payment Gateway 7.5.1
  • WooCommerce Stripe Payment Gateway 7.6.0
  • WooCommerce Stripe Payment Gateway 7.6.1