CVE-2020-16194

An Insecure Direct Object Reference IDOR vulnerability was found in Prestashop Opart devis 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the deliveryaddress and invoiceaddress fields...

PT-2021-9868

Name of the Vulnerable Software and Affected Versions Prestashop Opart devis versions prior to 4.0.2 Description An Insecure Direct Object Reference IDOR issue allows unauthenticated attackers to access any user's invoice and delivery address by exploiting the delivery address and invoice address...