CVE-2023-30198

Summary

CVE-2023-30198 is a new cybersecurity vulnerability affecting Prestashop's winbizpayment module version 1.0.2 and below. This issue involves incorrect access control, allowing unauthorized users to gain access to restricted downloads via the modules/winbizpayment/downloads/download.php file. Successful exploitation could lead to data leakage or unauthorized system modifications, posing a significant risk to e-commerce websites using this module. It is recommended that affected organizations immediately update their winbizpayment module to the latest available version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.