CVE-2024-53476

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-53476

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53476.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-53476

Published

2024-12-27T00:00:00Z

Modified

2026-10-21T02:30:27Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as the system fails to accurately track inventory under high concurrency, resulting in potential loss and unfulfilled orders.

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53476.json"
}

References

Affected packages

Git / github.com/simplcommerce/simplcommerce

Affected ranges

Type

GIT

Repo

https://github.com/simplcommerce/simplcommerce

Events

Introduced

Last Affected

230310c8d7a0408569b292c5a805c459d47a1d8f

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "230310c8d7a0408569b292c5a805c459d47a1d8f"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

1.*

1.0-beta

v0.*

v0.1-netcore1.1

v1.*

v1.0.0-rc

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53476.json"