PT-2023-23412 · Prestashop · Prestashop Postfinance
CVE-2023-31671
·
Publicado
2023-06-14
·
Atualizado
2025-01-06
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PrestaShop postfinance versions prior to 17.1.14
Description
The issue is related to SQL Injection via the
PostfinanceValidationModuleFrontController::postProcess() function. This allows for potential exploitation.Recommendations
For PrestaShop postfinance versions prior to 17.1.14, update to version 17.1.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the
PostfinanceValidationModuleFrontController::postProcess() function until a patch is applied.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Prestashop Postfinance