Packagist/prestashop/prestashop CVE-2023-25170: medium 5, EPSS 0.22%

Possible CSRF token fixation

Action: Upgrade prestashop/prestashop to 8.0.1 or later.

composer require prestashop/prestashop:8.0.1

Affected

Fixed versions

Sources

• osv: GHSA-3g43-x7qr-96ph
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3g43-x7qr-96ph
• https://nvd.nist.gov/vuln/detail/CVE-2023-25170
• https://github.com/PrestaShop/PrestaShop

CVE-2023-25170 · published 2023-03-13T20:51:32Z · modified 2026-09-10T03:49:52.411413948Z · JSON