CVE-2020-15082

External control of configuration setting in the dashboard in PrestaShop

High · published July 2, 2020

CVSS v3.1
7.1
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Published
2020-07-02T16:50Z
EPSS history
Timeline
  • 02 JUL 16:50Z
    External control of configuration setting in the dashboard in PrestaShop
    cvelistv5