Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-15080 EUVD-2020-7208

Information disclosure in release archive in PrestaShop

Published Jul 2, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server.

Affected products

VendorProductAffectedFixed
PrestaShop PrestaShop >= 1.7.4.0, <1.7.6.6 —

References