CVE-2021-21308CWE-287

Improper session management for soft logout

Medium · published February 26, 2021

CVSS v3.1
6.1
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01854 · 79.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-02-26T19:50Z
EPSS history
Timeline
  • 26 FEB 19:50Z
    Improper session management for soft logout
    cvelistv5