Description (CNA)
In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PrestaShop / PrestaShop | affected >= 1.7.0.0, < 1.7.6.5 |
CWE
CWE-284
References
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-cvjj-grfv-f56w
- https://github.com/PrestaShop/PrestaShop/commit/f9f442c87755908e23a6bcba8c443cdea1d78a7f
ADP enrichment
No English description supplied.