CVE-2023-3031

King-Avis Prestashop module (pre-17.3.15) suffers a path traversal vulnerability due to improper limitation of a pathname. An attacker who knows the download token can read arbitrary local files. Affected versions are King-Avis before 17.3.15. No exploit details are provided in the connected docu...