PT-2023-21274 · Prestashop · Tshirtecommerce

Published 2023-06-01 · Updated 2025-01-09 · CVE-2023-27639

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions tshirtecommerce (aka Custom Product Designer) version 2.1.4 for PrestaShop

Description An issue allows a remote attacker to forge an HTTP request with the file name parameter in the "tshirtecommerce/ajax.php?type=svg" endpoint to traverse directories and open files without restriction on the extension and path, but only files that can be parsed in XML can be opened. This issue has been exploited in the wild.

Recommendations For version 2.1.4, consider disabling the "tshirtecommerce/ajax.php?type=svg" endpoint or restricting access to it until a fix is available. Additionally, restrict the use of the file name parameter to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-27639

Affected Products

Tshirtecommerce

References · 3

• 🔥 https://friends-of-presta.github.io/security-advisories/module/2023/03/30/tshirtecommerce_cwe-22.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27639 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27639 · Vendor Advisory