CVE-2023-27844

Опубликовано: 17 апр. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.

Ссылки

https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
Patch
Third Party Advisory
https://litextension.com/migration-services/seo-urls-migrations.html#page%232
Product
https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
Patch
Third Party Advisory
https://litextension.com/migration-services/seo-urls-migrations.html#page%232
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:litextension:leurlrewrite:*:*:*:*:*:prestashop:*:*

Версия до 1.0 (включая)

EPSS

Процентиль: 50%

0.0027

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-m586-mx2j-5pc6