PT-2023-26999 · Unknown · Prestashop

Aleksey Solovev · Published 2023-08-07 · Updated 2024-03-06 · CVE-2023-39528

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.1.1

Description The issue concerns the displayAjaxEmailHTML method, which can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. This could potentially lead to a Remote Code Execution (RCE) vulnerability when combined with the Deserialization of Untrusted Data.

Recommendations For PrestaShop versions prior to 8.1.1, update to version 8.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the displayAjaxEmailHTML method until the patch is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BIT-PRESTASHOP-2023-39528

CVE-2023-39528

GHSA-HPF4-V7V2-95P2

Affected Products

Prestashop

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39528.json · Exploit
• https://github.com/PrestaShop/PrestaShop/commit/11de3a84322fa4ecd0995ac40d575db61804724c · Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hpf4-v7v2-95p2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39528 · Security Note
• https://osv.dev/vulnerability/GHSA-hpf4-v7v2-95p2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39528 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-prestashop-2023-39528 · Vendor Advisory
• https://github.com/PrestaShop/PrestaShop · Note
• https://t.me/cibsecurity/67931 · Telegram Post
• https://t.me/cvenotify/55962 · Telegram Post