PT-2021-9868
CVE-2020-16194
·
تاريخ النشر
2021-02-04
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Prestashop Opart devis versions prior to 4.0.2
Description
An Insecure Direct Object Reference (IDOR) issue allows unauthenticated attackers to access any user's invoice and delivery address by exploiting the
delivery address and invoice address fields.Recommendations
For Prestashop Opart devis versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
delivery address and invoice address fields until a patch is applied.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾