Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS03NXA1LWp3eDQtcXc5aM4AA1LU

PrestaShop boolean SQL injection

Impact

SQL injection possible in product search field, in BO's product page

Patches

8.1.1

Found by

Aleksey Solovev (Positive Technologies)

Workarounds

none

References

none

Permalink: https://github.com/advisories/GHSA-75p5-jwx4-qw9h
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03NXA1LWp3eDQtcXc5aM4AA1LU
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 9 months ago
Updated: 6 months ago

CVSS Score: 6.7
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Identifiers: GHSA-75p5-jwx4-qw9h, CVE-2023-39524
References:

• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-75p5-jwx4-qw9h
• https://nvd.nist.gov/vuln/detail/CVE-2023-39524
• https://github.com/PrestaShop/PrestaShop/commit/2047d4c053043102bc46a37d383b392704bf14d7
• https://github.com/advisories/GHSA-75p5-jwx4-qw9h

Repository: https://github.com/PrestaShop/PrestaShop
Blast Radius: 2.0

Affected Packages