CVE-2023-30282

Name of the Vulnerable Software and Affected Versions PrestaShop scexportcustomers versions 3.6.1 and earlier

Description The issue is related to Incorrect Access Control due to a lack of permissions control. This allows a guest to access exports from the module, potentially leading to a leak of personal information from the customer table.

Recommendations For PrestaShop scexportcustomers versions 3.6.1 and earlier, consider restricting access to the module to prevent unauthorized exports until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.