{"action":"Upgrade prestashop/blockreassurance to 5.1.4 or later.","affected":[{"fixed":"5.1.4","introduced":"0"}],"component":"prestashop/blockreassurance","cve_ids":["CVE-2023-47109"],"ecosystem":"Packagist","epss":0.00771,"exploited":false,"fixed_versions":["5.1.4"],"ghsa_id":"GHSA-83j2-qhx2-p7jc","id":"tcs_01M5KEYKWBHV67W9ZA40H0N0WQ","modified_at":"2026-09-10T03:49:58.812013518Z","published_at":"2023-11-08T17:53:14Z","references":["https://osv.dev/vulnerability/GHSA-83j2-qhx2-p7jc","https://github.com/PrestaShop/blockreassurance/security/advisories/GHSA-83j2-qhx2-p7jc","https://nvd.nist.gov/vuln/detail/CVE-2023-47109","https://github.com/PrestaShop/blockreassurance/commit/2d0e97bebf795690caffe33c1ab23a9bf43fcdfa","https://github.com/PrestaShop/blockreassurance/commit/eec00da564db4c1804b0a0d1e3d9f7ec4e27d823","https://github.com/PrestaShop/blockreassurance","https://github.com/PrestaShop/blockreassurance/releases/tag/v5.1.4"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-83j2-qhx2-p7jc","url":"https://osv.dev/vulnerability/GHSA-83j2-qhx2-p7jc"}],"summary":"PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block"}