Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-39525

PrestaShop vulnerable to path traversal

Description

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1.1 contains a patch for this issue. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • < 8.1.1affected

References