← voltar
CVE-2021-21308

Improper session management for soft logout

CVSS 6.1 MEDIUMEPSS 1.0%CWE-287
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
PrestaShop · PrestaShop

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/PrestaShop/PrestaShop/commit/2f673bd93e313f08c35e74decc105f40dc0b7deehttps://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-557h-hf3c-whcg