CVE-2020-5293

MEDIUM

PrestaShop 1.7.0.0-1.7.6.5 - Improper Access Control on Product Page

Title source: llm
STIX 2.1

Description

In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5.

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0066
EPSS Percentile 46.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Details

CWE
CWE-284 CWE-863
Status published
Products (1)
prestashop/prestashop 1.7.0.0 - 1.7.6.5
Published Apr 20, 2020
Tracked Since Feb 18, 2026