{"action":"Upgrade prestashop/prestashop to 8.1.2 or later.","affected":[{"fixed":"8.1.2","introduced":"0"}],"component":"prestashop/prestashop","cve_ids":["CVE-2023-43664"],"ecosystem":"Packagist","epss":0.00483,"exploited":false,"fixed_versions":["8.1.2"],"ghsa_id":"GHSA-gvrg-62jp-rf7j","id":"tcs_01M5KF34XNG5VEPBPJGFMZ0WWC","modified_at":"2026-07-16T09:11:44.123403342Z","published_at":"2023-09-28T16:26:48Z","references":["https://osv.dev/vulnerability/GHSA-gvrg-62jp-rf7j","https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gvrg-62jp-rf7j","https://nvd.nist.gov/vuln/detail/CVE-2023-43664","https://github.com/PrestaShop/PrestaShop/commit/15bd281c18f032a5134a8d213b44d24829d45762","https://github.com/PrestaShop/PrestaShop"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gvrg-62jp-rf7j","url":"https://osv.dev/vulnerability/GHSA-gvrg-62jp-rf7j"}],"summary":"PrestaShop allows employee without any access rights to list all installed modules"}