CVE-2018-5682

2018-01-1305:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a “This account does not exist” error message.

CPENameOperatorVersion
prestashopeq1.7.0.4
prestashopeq1.6.0.7
prestashopeq1.7.0.2
prestashopeq1.7.2.3
prestashopeq1.5.6.1
prestashopeq1.5.6.0
prestashopeq1.6.0.1
prestashopeq1.6.0.5
prestashopeq1.6.0.6
prestashopeq1.6.0.13

Name	Operator	Version
prestashop	eq	1.7.0.4
prestashop	eq	1.6.0.7
prestashop	eq	1.7.0.2
prestashop	eq	1.7.2.3
prestashop	eq	1.5.6.1
prestashop	eq	1.5.6.0
prestashop	eq	1.6.0.1
prestashop	eq	1.6.0.5
prestashop	eq	1.6.0.6
prestashop	eq	1.6.0.13

Rows per page:

1-10 of 421

References

forge.prestashop.com/browse/BOOM-4613