CVE-2024-26129

Summary

CVE-2024-26129 is a newly disclosed vulnerability affecting the PrestaShop open-source e-commerce platform. Versions 8.1.0 and earlier, up to 8.1.3, contain a path disclosure issue in a JavaScript variable. This flaw may reveal sensitive directory paths to an attacker, potentially enabling further exploitation. Users are urged to update to the patched version 8.1.4 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.