CVE-2018-13784

creationtimestamp| type| source ---|---|--- 2018-07-17 22:19:07+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4118 2018-07-18 09:16:09+00:00| published-proof-of-concept| https://t.me/HackerOne/2042...

CVE-2018-13784

CVE-2018-13784 affects PrestaShop prior to 1.6.1.20 and 1.7.x prior to 1.7.3.4, where cookie encryption in Cookie.php, Rijndael.php and Blowfish.php is mishandled. The connected exploits describe privilege-escalation PoC scenarios for PrestaShop