Описание
An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo() and postProcess methods.
Уязвимые конфигурации
Конфигурация 1Версия до 9.0.0 (исключая)
cpe:2.3:a:prestaworld:account_manager:*:*:*:*:*:prestashop:*:*
EPSS
Процентиль: 25%
0.00087
Низкий
7.5 High
CVSS3
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 7.5
github
почти 2 года назад
An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo() and postProcess methods.
EPSS
Процентиль: 25%
0.00087
Низкий
7.5 High
CVSS3
Дефекты
CWE-269