PT-2023-27068 · Prestashop · Myprestamodules Prestashop Module+1
CVE-2023-39677
·
Publicado
2023-09-08
·
Atualizado
2024-09-25
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
MyPrestaModules Prestashop Module version 6.2.9
UpdateProducts Prestashop Module version 3.6.9
Description
A PHPInfo information disclosure issue was discovered in the send.php file, allowing potential access to sensitive information.
Recommendations
For MyPrestaModules Prestashop Module version 6.2.9, consider disabling the
send.php file until a patch is available.
For UpdateProducts Prestashop Module version 3.6.9, restrict access to the send.php file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Myprestamodules Prestashop Module
Updateproducts Prestashop Module