Description

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.

Remediation

References

CVE-2020-4074

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1159)

MySQL CVE-2014-0393 Vulnerability (CVE-2014-0393)

MediaWiki Other Vulnerability (CVE-2012-5395)

WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights 404 Error Page Cross-Site Scripting (3.2.4)

WordPress Plugin Divi Builder Arbitrary File Upload (4.5.2)

Severity

Critical

Classification

CVE-2020-4074 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities