PT-2023-26999 · Unknown · Prestashop

Aleksey Solovev · CVE-2023-39528 · Publicado 2023-08-07 · Atualizado 2024-03-06

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.1.1

Description The issue concerns the displayAjaxEmailHTML method, which can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. This could potentially lead to a Remote Code Execution (RCE) vulnerability when combined with the Deserialization of Untrusted Data.

Recommendations For PrestaShop versions prior to 8.1.1, update to version 8.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the displayAjaxEmailHTML method until the patch is applied.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BIT-PRESTASHOP-2023-39528

CVE-2023-39528

GHSA-HPF4-V7V2-95P2

Produtos afetados

Prestashop

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39528.json · Exploit
• https://github.com/PrestaShop/PrestaShop · Nota
• https://github.com/PrestaShop/PrestaShop/commit/11de3a84322fa4ecd0995ac40d575db61804724c · Correção
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hpf4-v7v2-95p2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39528 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-hpf4-v7v2-95p2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-39528 · Aviso do Fabricante
• https://t.me/cibsecurity/67931 · Publicação no Telegram
• https://osv.dev/vulnerability/BIT-prestashop-2023-39528 · Aviso do Fabricante
• https://t.me/cvenotify/55962 · Publicação no Telegram