Описание
In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.7.0.0 (исключая) до 1.7.6.5 (исключая)
cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00212
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-284
CWE-863
EPSS
Процентиль: 44%
0.00212
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-284
CWE-863