Beveiligingsadvies

CVE-2024-36682

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-24 00:00:00

Laatst bijgewerkt 2024-08-02 03:37:05

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead to leak of personal information.

← Alle CVE's bekijken Bekijk op cve.org ↗