CVE-2023-50026

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Feb 9, 2024
Updated: Feb 15, 2024
CWE ID 89

Summary

CVE-2023-50026 is a SQL injection vulnerability found in the Presta Monster "Multi Accessories Pro" module for PrestaShop versions 5.1.1 and earlier. This vulnerability allows remote attackers to escalate privileges and gain access to sensitive information through the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts(). The risk score for this vulnerability is 66, indicating a high potential danger to organizations. The base severity is classified as critical, with a base score of 9.8, and it does not require any privileges or user interaction to exploit. The attack vector is through the network, and it has a high impact on both integrity and confidentiality. To remediate this vulnerability, organizations should update to a version of PrestaShop that is higher than 5.1.1 or apply any available patches provided by the vendor.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-50026 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options