Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PrestaShop Improper Privilege Management Vulnerability - CVE-2023-43663 - Vulnerability Database
PrestaShop

PrestaShop Improper Privilege Management Vulnerability - CVE-2023-43663

Medium
Reference: CVE-2023-43663
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-43663
Title: PrestaShop Improper Privilege Management Vulnerability
Overview:

PrestaShop is an Open Source e-commerce web application. In affected versions any module can be disabled or uninstalled from back office even with low user right. This allows low privileged users to disable portions of a shops functionality. Commit ce1f6708 addresses this issue and is included in version 8.1.2. Users are advised to upgrade. There are no known workarounds for this issue.