GHSA-hpf4-v7v2-95p2

Source

https://github.com/advisories/GHSA-hpf4-v7v2-95p2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/08/GHSA-hpf4-v7v2-95p2/GHSA-hpf4-v7v2-95p2.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-hpf4-v7v2-95p2

Aliases

Published

2023-08-09T14:38:18Z

Modified

2023-12-06T00:48:08.163585Z

Severity

6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N CVSS Calculator

Summary

PrestaShop file access through path traversal

Details

Impact

displayAjaxEmailHTML method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured.

This vulnerability can be exacerbated when coupled with CWE-502, which pertains to the Deserialization of Untrusted Data. Such a combination could potentially lead to a Remote Code Execution (RCE) vulnerability

Patches

8.1.1

Found by

Aleksey Solovev (Positive Technologies)

Workarounds

References

Database specific

{
    "nvd_published_at": "2023-08-07T21:15:10Z",
    "cwe_ids": [
        "CWE-22"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-08-09T14:38:18Z"
}

References

Affected packages

Packagist / prestashop/prestashop

Package

Name: prestashop/prestashop
Purl: pkg:composer/prestashop/prestashop

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.1.1

Affected versions

1.*

1.7.0.0-beta.1.0

1.7.0.0-beta.2.0

1.7.0.0-beta.3.0

1.7.0.0-beta.4.0

1.7.0.0-rc.0.0

1.7.0.0-rc.1.0

1.7.0.0-rc.2.0

1.7.0.0

1.7.0.1

1.7.0.2

1.7.0.3

1.7.0.4

1.7.0.5

1.7.0.6

1.7.1.0

1.7.1.1

1.7.1.2

1.7.2.0-rc.1.0

1.7.2.0

1.7.2.1

1.7.2.2

1.7.2.3

1.7.2.4

1.7.2.5

1.7.3.0

1.7.3.1

1.7.3.2

1.7.3.3

1.7.3.4

1.7.4.0-beta.1

1.7.4.0

1.7.4.1

1.7.4.2

1.7.4.3

1.7.4.4

1.7.5.0-beta.1

1.7.5.0-rc.1

1.7.5.0

1.7.5.1

1.7.5.2

1.7.6.0-beta.1

1.7.6.0-rc.1

1.7.6.0-rc.2

1.7.6.0

1.7.6.1

1.7.6.2

1.7.6.3

1.7.6.4

1.7.6.5

1.7.6.6

1.7.6.7

1.7.6.8

1.7.6.9

1.7.7.0-beta.1

1.7.7.0-beta.2

1.7.7.0-rc.1

1.7.7.0

1.7.7.1

1.7.7.2

1.7.7.3

1.7.7.4

1.7.7.5

1.7.7.6

1.7.7.7

1.7.7.8

1.7.8.0-beta.1

1.7.8.0-rc.1

1.7.8.0

1.7.8.1

1.7.8.2

1.7.8.3

1.7.8.4

1.7.8.5

1.7.8.6

1.7.8.7

1.7.8.8

1.7.8.9

1.7.8.10

8.*

8.0.0-beta.1

8.0.0-rc.1

8.0.0

8.0.1

8.0.2

8.0.3

8.0.4

8.0.5

8.1.0-beta.1

8.1.0-rc.1

8.1.0

Database specific

{
    "last_known_affected_version_range": "<= 8.1.0"
}