Description

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.

Remediation

References

CVE-2020-4074

Related Vulnerabilities

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-2667)

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)

WordPress Plugin Image Slider-Responsive Slider Unspecified Vulnerability (2.4.2)

SharePoint CVE-2021-40483 Vulnerability (CVE-2021-40483)

WordPress Plugin Advanced Classifieds & Directory Pro Local File Inclusion (3.1.3)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-287 CVE-2020-4074