Skip to content
OpenAdvisories
Medium · 5.8 CVE-2024-26129 EUVD-2024-0476GHSA-3366-9287-7qpr

Prestashop vulnerable to path disclosure in JavaScript variable

Published Feb 19, 2024 · Updated Aug 1, 2024 · Assigned by GitHub_M

Description

PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.

Affected products

VendorProductAffectedFixed
PrestaShop PrestaShop >= 8.1.0, < 8.1.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist prestashop/prestashop >= 8.1.0, < 8.1.4 8.1.4 GHSA-3366-9287-7qpr

References