CVE-2024-34991

In the module "Axepta" axepta before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information expiry date / postal address / email / etc. without restriction due to a lack of permissions control...

CVE-2024-34991

The CVE-2024-34991 entry concerns the Axepta module for PrestaShop by Quadra Informatique, affected up to version 1.3.3. The vulnerability arises from insufficient permissions control, allowing an unauthenticated guest to download sensitive data (partial credit card information such as expiry dat...