PT-2023-23413 · Unknown · Prestashop

CVE-2023-31672

Publicado

2023-06-15

Atualizado

2024-12-12

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 2.4.3

Description The issue concerns a SQL injection vulnerability in the "Length, weight or volume sell" module, also known as ailinear.

Recommendations For PrestaShop versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

BIT-PRESTASHOP-2023-31672

CVE-2023-31672

Prestashop