CVE-2024-34991

2024-06-2422:15:10

[email protected]

web.nvd.nist.gov

cve-2024-34991

quadra informatique

prestashop

permissions control

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the module “Axepta” (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email / etc. without restriction due to a lack of permissions control.

References

security.friendsofpresta.org/modules/2024/06/20/axepta.html