PT-2018-14817 · Prestashop · Prestashop

Farisv · Publicado 2018-11-09 · Atualizado 2019-10-03 · CVE-2018-19125

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.6.x through 1.6.1.22 PrestaShop versions 1.7.x through 1.7.4.3

Description The issue allows remote attackers to delete an image directory.

Recommendations For PrestaShop versions 1.6.x through 1.6.1.22, update to version 1.6.1.23 or later. For PrestaShop versions 1.7.x through 1.7.4.3, update to version 1.7.4.4 or later.

Exploit

Correção

Identificadores relacionados

CVE-2018-19125

Produtos afetados

Prestashop

Referências · 7

• 🔥 https://exploit-db.com/exploits/45964 · Exploit
• https://github.com/PrestaShop/PrestaShop/pull/11285 · Correção
• https://github.com/PrestaShop/PrestaShop/pull/11286 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19125 · Nota
• http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19125 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19125 · Aviso do Fabricante