Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PrestaShop Observable Timing Discrepancy Vulnerability - CVE-2026-25597 - Vulnerability Database
PrestaShop

PrestaShop Observable Timing Discrepancy Vulnerability - CVE-2026-25597

Medium
Reference: CVE-2026-25597
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-25597
Title: PrestaShop Observable Timing Discrepancy Vulnerability
Overview:

PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3 there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3.