CVE-2023-39525

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.1.1

Description The issue allows files to be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path in the back office. There are no known workarounds.

Recommendations For PrestaShop versions prior to 8.1.1, update to version 8.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the import file deletion query to minimize the risk of exploitation.