{"action":"Upgrade prestashop/blockreassurance to 5.1.4 or later.","affected":[{"fixed":"5.1.4","introduced":"0"}],"component":"prestashop/blockreassurance","cve_ids":["CVE-2023-47110"],"ecosystem":"Packagist","epss":0.00418,"exploited":false,"fixed_versions":["5.1.4"],"ghsa_id":"GHSA-xfm3-hjcc-gv78","id":"tcs_01M5KFAZJXTWKWVJSM7NWJZWTJ","modified_at":"2026-09-10T03:50:08.811752065Z","published_at":"2023-11-09T16:02:38Z","references":["https://osv.dev/vulnerability/GHSA-xfm3-hjcc-gv78","https://github.com/PrestaShop/blockreassurance/security/advisories/GHSA-xfm3-hjcc-gv78","https://nvd.nist.gov/vuln/detail/CVE-2023-47110","https://github.com/PrestaShop/blockreassurance/commit/0a74bf1ebb907eef39e235a3a6dca0c28ed3ad23","https://github.com/PrestaShop/blockreassurance","https://github.com/PrestaShop/blockreassurance/releases/tag/v5.1.4"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xfm3-hjcc-gv78","url":"https://osv.dev/vulnerability/GHSA-xfm3-hjcc-gv78"}],"summary":"Any value can be changed in the configuration table by an employee having access to block reassurance module"}