Описание
An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.
Уязвимые конфигурации
Конфигурация 1Версия до 1.178.36 (исключая)
cpe:2.3:a:prestalife:product_designer:*:*:*:*:*:prestashop:*:*
EPSS
Процентиль: 81%
0.01591
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 9.8
github
почти 2 года назад
An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.
EPSS
Процентиль: 81%
0.01591
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-502