GitHub Advisoryadvisory · Packagist

GHSA-hpf4-v7v2-95p2 PrestaShop file access through path traversal

MEDIUM Published 2023-08-09 Modified 2023-09-07 Official page ↗
Aliases
CVE-2023-39528
Ecosystem
Packagist
Packages
prestashop/prestashop
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-22
Reviewed
2023-08-09

Affected packages

• Packagist prestashop/prestashop: < 8.1.1 → fixed in 8.1.1

Description

Impact `displayAjaxEmailHTML` method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. This vulnerability can be exacerbated when coupled with CWE-502, which pertains to the Deserialization of Untrusted Data. Such a combination could potentially lead to a Remote Code Execution (RCE) vulnerability Patches 8.1.1 Found by Aleksey Solovev (Positive Technologies) Workarounds References

Related

Alias · CVE (1)

  • CVE-2023-39528 PrestaShop is an open source e-commerce web application. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References