CVE-2020-5287 in PrestaShop

Riassunto

di MITRE

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: GitHub, Inc.
• Prenotare: 02/01/2020
• Moderazione: accettato
• Voce: VDB-154127
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 4.1 (NVD)
• EPSS: 0.00663
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5287
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5287
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5287/