lblfixer_cve2020_5250

LabelGrup Networks，官方 PrestaShop 合作伙伴 用于 PS 1.7.X 的模块，修复 CVE-2020-5250 漏洞（WIP） 查看： https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 访问我们的网站： https://www.labelgrup.com...

CVE-2020-5250

In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the idaddress in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the idcustomer and change all information of all accounts. The problem is...

CVE-2020-5250 Possible information disclosure in PrestaShop

In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the idaddress in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the idcustomer and change all information of all accounts. The problem is...

CVE-2020-5250

Summary: CVE-2020-5250 affects PrestaShop versions prior to 1.7.6.4. An attacker can modify address-related fields in the customer form (id_address) and, similarly, id_customer in CustomerForm, enabling theft of someone else’s address/information. This is a server-side validation weakness that al...