Описание
The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.6 (включая) до 1.7 (включая)
cpe:2.3:a:prestashop:correos_express:*:*:*:*:*:prestashop:*:*
EPSS
Процентиль: 68%
0.00561
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
github
больше 3 лет назад
The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.
EPSS
Процентиль: 68%
0.00561
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732