CVE-2023-36263

Name of the Vulnerable Software and Affected Versions Prestashop opartlimitquantity versions 1.4.5 and earlier

Description The issue concerns sensitive SQL calls in the OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage() function that can be executed with a trivial HTTP call, potentially leading to SQL injection. This can be exploited to forge a SQL injection.

Recommendations For Prestashop opartlimitquantity versions 1.4.5 and earlier, as a temporary workaround, consider disabling the OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.