CVE-2023-46346

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 25, 2023
Updated: Nov 1, 2023
CWE ID 22

Summary

A vulnerability with the CVE ID CVE-2023-46346 has been identified in the "Product Catalog (CSV, Excel, XML) Export PRO" module in versions up to 4.1.1 of MyPrestaModules for PrestaShop. This vulnerability allows a guest to perform a path traversal attack and download personal information without any restrictions. The issue arises from a lack of permissions control and inadequate control in the construction of the path name. As a result, a guest can access and view all files on the affected information system. The vulnerability is categorized as having a high base severity and a base score of 7.5 according to NVD@NIST.gov. It poses a significant danger to organizations as it can lead to unauthorized access and compromise of sensitive data. Remediation involves updating the affected module to version 4.1.2 or higher, which addresses the vulnerability and enhances security measures.

Note: The provided information is fictional and does not represent an actual vulnerability or product.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-46346 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options