Description (CNA)
In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PrestaShop / PrestaShop | affected >= 1.5.0.0, < 1.7.6.6 |
CWE
CWE-287
References
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-ccvh-jh5x-mpg4
- https://github.com/PrestaShop/PrestaShop/commit/30b6a7bdaca9cb940d3ce462906dbb062499fc30
ADP enrichment
No English description supplied.