CVE-2020-9368

The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.

published November 2, 2020

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.. directory traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02039 · 81.0th percentile
Published
2020-11-02T17:12Z
EPSS history
Timeline
  • 02 NOV 17:12Z
    The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.
    cvelistv5