PT-2018-12183 · Prestashop · Prestashop

Charles Fol · Publicado 2018-07-09 · Atualizado 2019-10-03 · CVE-2018-13784

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 1.6.1.20 PrestaShop versions 1.7.x prior to 1.7.3.4

Description The issue concerns the mishandling of cookie encryption in certain PHP files, specifically Cookie.php, Rinjdael.php, and Blowfish.php.

Recommendations For PrestaShop versions prior to 1.6.1.20, update to version 1.6.1.20 or later. For PrestaShop versions 1.7.x prior to 1.7.3.4, update to version 1.7.3.4 or later.

Exploit

Correção

Identificadores relacionados

CVE-2018-13784

Produtos afetados

Prestashop

Referências · 9

• 🔥 https://github.com/ambionics/prestashop-exploits · Exploit
• 🔥 https://exploit-db.com/exploits/45047 · Exploit
• 🔥 https://exploit-db.com/exploits/45046 · Exploit
• https://github.com/PrestaShop/PrestaShop/pull/9222 · Nota
• https://github.com/PrestaShop/PrestaShop/pull/9218 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13784 · Nota
• http://build.prestashop.com/news/prestashop-1-7-3-4-1-6-1-20-maintenance-releases · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-13784 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13784 · Nota de Segurança