logo

Database

Lack of data validation - Path Traversal In prestashop/prestashop

Description

Path disclosure in JavaScript variable

Impact

Path disclosure in JavaScript variable

Patches

Patch in PrestaShop 8.1.4

References

https://owasp.org/www-community/attacks/Full_Path_Disclosure

Thanks to https://github.com/hugo-fasone

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2024-261292. NVD-2024-261293. OSV-2024-261294. GHSA-3366-9287-7qpr5. GCVE-2024-26129

References

1. https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3366-9287-7qpr2. https://github.com/PrestaShop/PrestaShop/commit/444bd0dea581659918fe2067541b9863cf099dd53. https://owasp.org/www-community/attacks/Full_Path_Disclosure

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.