Description
Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Webbax | King-Avis | < 17.3.15 | 17.3.15 |