CVE-2020-5288 in PrestaShop

Riassunto

di MITRE

"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: GitHub, Inc.
• Prenotare: 02/01/2020
• Moderazione: accettato
• Voce: VDB-154128
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 4.1 (NVD)
• EPSS: 0.00663
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5288
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5288
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5288/