PT-2024-20347 · Mailjet · Mailjet Module For Prestashop

Published 2024-02-07 · Updated 2025-06-09 · CVE-2024-24304

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mailjet module for PrestaShop versions prior to 3.5.1

Description A guest can download technical information without restriction in the Mailjet module for PrestaShop.

Recommendations For versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-24304

Affected Products

Mailjet Module For Prestashop

References · 8

• https://osv.dev/vulnerability/CVE-2024-24304 · Vendor Advisory
• https://security.friendsofpresta.org/modules/2024/02/06/mailjet.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-24304 · Security Note
• https://github.com/mailjet/prestashop-mailjet-plugin-apiv3/releases/tag/v3.5.1 · Note
• https://t.me/cvenotify/125114 · Telegram Post
• https://twitter.com/CVEnew/status/1755148962489925825 · Twitter Post
• https://t.me/cvenotify/70364 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1755192743171703200 · Twitter Post