CVE-2024-25839

CVSS 7.5 HIGHEPSS 0.5%CWE-200

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

03 mar 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-supernewsletter.md