CVE-2024-26129
1 advisory.
Packagist/prestashop/prestashop CVE-2024-26129: medium 5.8
Path disclosure in JavaScript variable
Action: Upgrade prestashop/prestashop to 8.1.4 or later.
composer require prestashop/prestashop:8.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.1.0 | 8.1.4 | - |
Fixed versions
| 8.1.4 |
Sources
- osv: GHSA-3366-9287-7qpr
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3366-9287-7qpr
- https://nvd.nist.gov/vuln/detail/CVE-2024-26129
- https://github.com/PrestaShop/PrestaShop/commit/444bd0dea581659918fe2067541b9863cf099dd5
- https://github.com/PrestaShop/PrestaShop
- https://owasp.org/www-community/attacks/Full_Path_Disclosure
CVE-2024-26129 · published · modified · JSON