CVE-2023-47109
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-47109 is a cyber vulnerability that affects PrestaShop blockreassurance, a module used to provide helpful information and reassure customers about the trustworthiness of an online store. The vulnerability allows a Back Office (BO) user to modify the HTTP request and specify the path of any file in the project instead of an image when adding a block. This can lead to the deletion of important files, potentially rendering the website completely unavailable. The issue has been patched in version 5.1.4 of PrestaShop blockreassurance. This vulnerability has a high base severity score of 8.1, with low privileges required and no user interaction necessary for exploitation. It poses a high integrity impact, but no confidentiality impact. The vulnerability has a low attack complexity and can be exploited over a network, resulting in potential damage to the availability of the affected organization's website.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions