Описание
In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ - admin-dev/index.php/improve/international/geolocation/ - admin-dev/index.php/improve/international/localization - admin-dev/index.php/configure/advanced/performance - admin-dev/index.php/sell/orders/delivery-slips/ - admin-dev/index.php?controller=AdminStatuses The problem is fixed in 1.7.6.5
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.5.0.0 (исключая) до 1.7.6.5 (исключая)
cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00173
Низкий
4.1 Medium
CVSS3
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-284
CWE-863
EPSS
Процентиль: 39%
0.00173
Низкий
4.1 Medium
CVSS3
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-284
CWE-863