PT-2023-29543 · Prestashop · Product Catalog (Csv

CVE-2023-45387

Publicado

2023-11-17

Atualizado

2023-11-25

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrestaShop module "Product Catalog (CSV, Excel, XML) Export PRO" versions prior to 5.0.0

Description The issue allows a guest to perform SQL injection via the exportProduct:: addDataToDb() function.

Recommendations For versions prior to 5.0.0, consider disabling the exportProduct:: addDataToDb() function until a patch is available.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-45387

Product Catalog (Csv