PT-2023-22342 · Unknown+1 · Prestashop+1

Publicado 2023-06-05 · Atualizado 2023-06-13 · CVE-2023-29631

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrestaShop jmsslider version 1.6.0

Description The issue is related to Incorrect Access Control. It affects the ajax jmsslider.php file.

Recommendations For PrestaShop jmsslider version 1.6.0, consider restricting access to the ajax jmsslider.php file until a fix is available.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2023-29631

Produtos afetados

Prestashop

Jmsslider

Referências · 4

• https://t.me/cvenotify/51801 · Publicação no Telegram
• https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsslider.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-29631 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-29631 · Aviso do Fabricante