Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2024-26129

Prestashop vulnerable to path disclosure in JavaScript variable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • >= 8.1.0, < 8.1.4affected

References