Beveiligingsadvies

CVE-2024-34717

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-14 15:47:27

Laatst bijgewerkt 2024-08-02 02:59:22

Toegewezen door GitHub_M

CVSS-score 5.3

Status PUBLISHED

Beschrijving

PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url. This issue is patched in version 8.1.6. No known workarounds are available.

← Alle CVE's bekijken Bekijk op cve.org ↗