github.com
https://github.com/PrestaShop/PrestaShop CVE-2023-43663
MEDIUM
Improper Privilege Management in Prestashop
Record summary
CVE-2023-43663 has a selected CVSS score of 6.3 (medium).
Description
PrestaShop is an Open Source e-commerce web application. In affected versions any module can be disabled or uninstalled from back office, even with low user right. This allows low privileged users to disable portions of a shops functionality. Commit `ce1f6708` addresses this issue and is included in version 8.1.2. Users are advised to upgrade. There are no known workarounds for this issue.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 20, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
PrestaShopBrowse PrestaShop / PrestaShop | CVE List | < 8.1.2 | affected |
prestashop/prestashopBrowse Packagist / prestashop/prestashop | GitHub Advisory | Before 8.1.2 · Fixed in 8.1.2 | affected |
References
4github.com
https://github.com/PrestaShop/PrestaShop/commit/ce1f67083537194e974caf86c57e547a0aaa46cd github.comConfirmation
https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6jmf-2pfc-q9m7 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-43663