CVE-2023-43664
1 advisory.
Packagist/prestashop/prestashop CVE-2023-43664: medium 4.3, EPSS 0.48%
PrestaShop allows employee without any access rights to list all installed modules
Action: Upgrade prestashop/prestashop to 8.1.2 or later.
composer require prestashop/prestashop:8.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.1.2 | - |
Fixed versions
| 8.1.2 |
Sources
- osv: GHSA-gvrg-62jp-rf7j
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gvrg-62jp-rf7j
- https://nvd.nist.gov/vuln/detail/CVE-2023-43664
- https://github.com/PrestaShop/PrestaShop/commit/15bd281c18f032a5134a8d213b44d24829d45762
- https://github.com/PrestaShop/PrestaShop
CVE-2023-43664 · published · modified · JSON