CVE-2020-15080

In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure composer.json and docker-compose.yml are not accessible on your server...

CVE-2020-15080

CVE-2020-15080 affects PrestaShop versions 1.7.4.0 up to, but not including, 1.7.6.6. The issue: release archives may contain files that should not be present and certain files may be accessible, leading to information disclosure about affected components. The fixed version is 1.7.6.6. A workarou...