Skip to content
OpenAdvisories
High · 7.5 CVE-2024-34991 EUVD-2024-35140GHSA-5vq6-44f5-4pc9

In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information …

Published Jun 24, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email / etc. without restriction due to a lack of permissions control.

References