Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2023-3031

Prestahop module King-Avis - Path traversal

Description

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Webbax King-Avis

Default version status: unaffected

  • 0 to < 17.3.15affected

References