PT-2020-20615

Name of the Vulnerable Software and Affected Versions PrestaShop Module Olea Gift On Order versions through 5.0.8 Description The issue allows an unauthenticated user to read arbitrary files on the server via a directory traversal attack using the getfile.php endpoint with a file parameter, such ...