Inadequate Access Control

PrestaShop is vulnerable to Inadequate Access Control.The vulnerability is due not checking access rights properly in the ajaxProcessGetPossibleHookingListForModule function in AdminModulesPositionsController.php. This may lead to an attacker listing all modules without any access rights...

CVE-2023-43664

PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface, an employee can list all modules without any access rights: method ajaxProcessGetPossibleHookingListForModule doesn't check access rights. This issue has been addressed in commit 15bd281c which is...

CVE-2023-43664: Improper Privilege Management

PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface, an employee can list all modules without any access rights: method ajaxProcessGetPossibleHookingListForModule doesn't check access rights. This issue has been addressed in commit 15bd281c which is...