PT-2024-13662

CVE-2023-48926

·

Published

2024-01-16

·

Updated

2024-01-23

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions 202 ecommerce Advanced Loyalty Program: Loyalty Points versions prior to 2.3.4 for PrestaShop
Description The issue allows unauthenticated attackers to arbitrarily change an order status.
Recommendations For versions prior to 2.3.4, update to version 2.3.4 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2023-48926
GHSA-JP2C-MJ65-QPMW
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com