Описание
PrestaShop affected by time based enumeration in FO login form
Impact
A time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times.
Patches
8.2.4 and 9.0.3
Workarounds
none
References
Found by Lam Yiu Tung
Пакеты
Наименование
prestashop/prestashop
composer
Затронутые версииВерсия исправления
>= 9.0.0-alpha.1, < 9.0.3
9.0.3
Наименование
prestashop/prestashop
composer
Затронутые версииВерсия исправления
< 8.2.4
8.2.4