Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PrestaShop Improper Privilege Management Vulnerability - CVE-2023-43664 - Vulnerability Database
PrestaShop

PrestaShop Improper Privilege Management Vulnerability - CVE-2023-43664

Medium
Reference: CVE-2023-43664
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-43664
Title: PrestaShop Improper Privilege Management Vulnerability
Overview:

PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface an employee can list all modules without any access rights: method ajaxProcessGetPossibleHookingListForModule doesn39t check access rights. This issue has been addressed in commit 15bd281c which is included in version 8.1.2. Users are advised to upgrade. There are no known workaround for this issue.