CVE-2024-41651

PrestaShop versions v.8.1.7 and earlier are vulnerable to arbitrary code execution via the module upgrade functionality . The vulnerability can be triggered by a Blind SSRF to RCE, where an attacker intercepts and modifies a request to point to a malicious zip file containing a repackaged module ...