CVE-2023-39524
PrestaShop vulnerable to boolean SQL injection in search product in BO
Résumé
PrestaShop vulnerable to boolean SQL injection in search product in BO
Description d'origine
La description telle que publiée par la source (souvent en anglais).
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com