PT-2023-21212

CVE-2023-27569

·

Published

2023-03-21

·

Updated

2023-03-24

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions eo tags package versions prior to 1.3.0 for PrestaShop
Description The issue allows SQL injection via an HTTP User-Agent or Referer header. This can potentially lead to unauthorized access to sensitive data.
Recommendations For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the eo tags package until a patch is available. Avoid using the User-Agent and Referer headers in HTTP requests to the affected package until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾