PT-2024-21150 · Webbax · Super Newsletter

Published 2024-03-03 · Updated 2024-08-26 · CVE-2024-25839

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.4.21 and earlier

Description An issue was discovered in the Webbax "Super Newsletter" module, allowing local attackers to escalate privileges and obtain sensitive information.

Recommendations For PrestaShop versions 1.4.21 and earlier, consider disabling the Webbax "Super Newsletter" module until a patch is available to prevent privilege escalation and sensitive information disclosure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-25839

Affected Products

Super Newsletter

References · 6

• https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-supernewsletter.md · Patch
• https://osv.dev/vulnerability/CVE-2024-25839 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25839 · Security Note
• https://t.me/cvenotify/72878 · Telegram Post
• https://twitter.com/CVEnew/status/1764208683939176616 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1764254850965991763 · Twitter Post