Lucene search
MitreCVELIST:CVE-2023-45380HistoryNov 07, 2023 - 12:00 a.m.
CVE-2023-45380
2023-11-0700:00:00
mitre
www.cve.org
3
cve-2023-45380
silbersaiten
prestashop
permissions control
personal information
data security
In the module “Order Duplicator " Clone and Delete Existing Order” (orderduplicate) in version <= 1.1.7 from Silbersaiten for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can download personal information from ps_customer/ps_address tables such as name / surname / phone number / full postal address.
Related
vulnrichment
vulnrichment
CVE-2023-45380
2023-11-07 00:00:00
prion
prion
Design/Logic Flaw
2023-11-07 23:15:00
cve
cve
CVE-2023-45380
2023-11-07 23:15:07
nvd
nvd
CVE-2023-45380
2023-11-07 23:15:07