CVE-2020-21967 in PrestaShop

요약

\~에 의해 MITRE • 2022. 07. 14.

File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page.

Be aware that VulDB is the high quality source for vulnerability data.

• 예약하다: 2020. 08. 13.
• 공개: 2022. 07. 14.
• 모더레이션: 수락
• 항목: VDB-203828
• CPE: 준비됨
• CWE: CWE-434 (확인됨)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00576
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Telecommunication, Hostingprovider, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-21967
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-21967
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-21967/