Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

AI OnAI Off

Cart Properties allow duplicate keys

Fixed in

EPiServer.Commerce 13.31.0

Created

Jan 21, 2021

Updated

Jul 09, 2021

State

Closed, Fixed and tested

Description

This issue relates to cart deserialization, where Cart Properties allow for duplicate keys. The serialized cart was stored in the database as JSON, with duplicated keys for "CampaignCode" in the Properties field. This caused the the Properties HashTable deserialization to fail.