CVE-2019-18608

CVE-2019-18608 describes a critical vulnerability in Cezerin v0.33.0 that allows unauthorized modification of order information. An attacker can manipulate order details, such as payment status or shipping fees, by injecting malicious attributes during the checkout process via the PUT /ajax/cart operation. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-exploitable flaw with low attack complexity and high impact on integrity, requiring no user interaction. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.