CVE-2023-30839
PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
Résumé
PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
Description d'origine
La description telle que publiée par la source (souvent en anglais).
PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com