CVE-2024-34991

In the module "Axepta" axepta before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information expiry date / postal address / email / etc. without restriction due to a lack of permissions control...

CVE-2024-34991

The Axepta (axepta) module for PrestaShop , developed by Quadra Informatique, is vulnerable in versions prior to 1.3.4 . A lack of permissions control allows an unauthenticated guest to download sensitive information without restriction, including partial credit card data (such as expiry dates), ...