CVE-2023-3031

Name of the Vulnerable Software and Affected Versions King-Avis versions prior to 17.3.15

Description The issue is related to Improper Limitation of a Pathname, leading to a Path Traversal vulnerability in the King-Avis module for Prestashop. This allows a user with knowledge of the download token to read arbitrary local files.

Recommendations For versions prior to 17.3.15, update to version 17.3.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the download token to minimize the risk of exploitation.