Code injection

2018-11-0911:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

72.0%

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files.

CPENameOperatorVersion
prestashopge1.6.0.1
prestashoplt1.6.1.23
prestashopge1.7.0.0
prestashoplt1.7.4.4

Name	Operator	Version
prestashop	ge	1.6.0.1
prestashop	lt	1.6.1.23
prestashop	ge	1.7.0.0
prestashop	lt	1.7.4.4

References

build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/

github.com/PrestaShop/PrestaShop/pull/11285

github.com/PrestaShop/PrestaShop/pull/11286