GHSA-6jmf-2pfc-q9m7

Source

https://github.com/advisories/GHSA-6jmf-2pfc-q9m7

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/09/GHSA-6jmf-2pfc-q9m7/GHSA-6jmf-2pfc-q9m7.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-6jmf-2pfc-q9m7

Aliases

Published

2023-09-28T16:27:33Z

Modified

2023-12-06T00:48:11.250291Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

PrestaShop allows users to uninstall modules from backoffice, even with low rights

Details

Impact

Any module can be disabled or uninstalled from back office, even with low user right.

Patches

8.1.2

Workarounds

none

References

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2023-09-28T16:27:33Z",
    "nvd_published_at": "2023-09-28T19:15:10Z",
    "cwe_ids": [
        "CWE-269"
    ],
    "severity": "MODERATE"
}

References

Affected packages

Packagist / prestashop/prestashop

Package

Name: prestashop/prestashop
Purl: pkg:composer/prestashop/prestashop

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.1.2

Affected versions

1.*

1.7.0.0-beta.1.0

1.7.0.0-beta.2.0

1.7.0.0-beta.3.0

1.7.0.0-beta.4.0

1.7.0.0-rc.0.0

1.7.0.0-rc.1.0

1.7.0.0-rc.2.0

1.7.0.0

1.7.0.1

1.7.0.2

1.7.0.3

1.7.0.4

1.7.0.5

1.7.0.6

1.7.1.0

1.7.1.1

1.7.1.2

1.7.2.0-rc.1.0

1.7.2.0

1.7.2.1

1.7.2.2

1.7.2.3

1.7.2.4

1.7.2.5

1.7.3.0

1.7.3.1

1.7.3.2

1.7.3.3

1.7.3.4

1.7.4.0-beta.1

1.7.4.0

1.7.4.1

1.7.4.2

1.7.4.3

1.7.4.4

1.7.5.0-beta.1

1.7.5.0-rc.1

1.7.5.0

1.7.5.1

1.7.5.2

1.7.6.0-beta.1

1.7.6.0-rc.1

1.7.6.0-rc.2

1.7.6.0

1.7.6.1

1.7.6.2

1.7.6.3

1.7.6.4

1.7.6.5

1.7.6.6

1.7.6.7

1.7.6.8

1.7.6.9

1.7.7.0-beta.1

1.7.7.0-beta.2

1.7.7.0-rc.1

1.7.7.0

1.7.7.1

1.7.7.2

1.7.7.3

1.7.7.4

1.7.7.5

1.7.7.6

1.7.7.7

1.7.7.8

1.7.8.0-beta.1

1.7.8.0-rc.1

1.7.8.0

1.7.8.1

1.7.8.2

1.7.8.3

1.7.8.4

1.7.8.5

1.7.8.6

1.7.8.7

1.7.8.8

1.7.8.9

1.7.8.10

8.*

8.0.0-beta.1

8.0.0-rc.1

8.0.0

8.0.1

8.0.2

8.0.3

8.0.4

8.0.5

8.1.0-beta.1

8.1.0-rc.1

8.1.0

8.1.1