CVE-2023-30281 — n/a / n/a

Description (CNA)

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from ps_customer table sush as name / surname / email

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://friends-of-presta.github.io/security-advisories/modules/2023/05/04/scquickaccounting.html

ADP enrichment

CVE

No English description supplied.

https://friends-of-presta.github.io/security-advisories/modules/2023/05/04/scquickaccounting.html

CISA-ADP

No English description supplied.

No references supplied.