Business Logic Errors in pimcore/pimcore
Dec 9th 2021
The application is vulnerable to Business Logic error through negative cart amount.
Proof of Concept
Step 1: Login to the application https://10.x-dev.pimcore.fun/admin/login?perspective=
Step 2: Navigate to Online shop -> Pricing Rules -> Voucher Discount -> Actions``
Step 3: Enter Negative amount in Cart Discount and click on save.
The whole Pricing Rules module is affected.