CVE-2024-58248 Information

Description

nopCommerce before 4.80.0 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards.

Reference

https://github.com/nopSolutions/nopCommerce/issues/7325 https://www.nopcommerce.com/en/release-notes