CVE-2024-26129

MEDIUM

Prestashop vulnerable to path disclosure in JavaScript variable

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-26129 has a selected CVSS score of 5.8 (medium).

Description

PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 21, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

PrestaShop

Browse PrestaShop / PrestaShop

Default status: unknown

CVE List>= 8.1.0, < 8.1.4affected
8.1.0 to < 8.1.4affected

prestashop/prestashop

Browse Packagist / prestashop/prestashop
GitHub Advisory8.1.0 to < 8.1.4 · Fixed in 8.1.4affected

References

5