Description

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2

Remediation

References

CVE-2021-21308

Related Vulnerabilities

Oracle Database Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-21174)

Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-30253)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2889)

WordPress Plugin PWG Random Cross-Site Request Forgery (1.11)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-2562)

Severity

Critical

Classification

CVE-2021-21308 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities