PT-2021-9868
CVE-2020-16194
·
Published
2021-02-04
·
Updated
2021-07-21
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Prestashop Opart devis versions prior to 4.0.2
Description
An Insecure Direct Object Reference (IDOR) issue allows unauthenticated attackers to access any user's invoice and delivery address by exploiting the
delivery address and invoice address fields.Recommendations
For Prestashop Opart devis versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
delivery address and invoice address fields until a patch is applied.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾