PT-2023-22578 · Prestashop · Prestashop Salesbooster

CVE-2023-30196

·

Publicado

2023-05-30

·

Atualizado

2025-01-13

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Prestashop salesbooster versions 1.10.4 and earlier
Description The issue is related to Incorrect Access Control. It affects the "download.php" file in the "modules/salesbooster/downloads" directory.
Recommendations For Prestashop salesbooster versions 1.10.4 and earlier, update to a version later than 1.10.4 to resolve the issue. As a temporary workaround, consider restricting access to the "download.php" file in the "modules/salesbooster/downloads" directory until a patch is available.

Correção

Origin Validation Error

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-346CWE-22

Identificadores relacionados

CVE-2023-30196

Produtos afetados

Prestashop Salesbooster