CVE-2023-46355

In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction

published November 27, 2023

CVSS
—
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead to leaks of personal information from ps_customer / ps_order table such as name / surname / email / phone number / postal address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00501 · 42.0th percentile
Published
2023-11-27T00:00Z
EPSS history
Timeline
  • 27 NOV 00:00Z
    In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction
    cvelistv5