User Enumeration

🗓️ 03 Oct 2025 11:13:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

Prestashop back office allows user enumeration due to insecure handling of employee identifier and reset token.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Prestashop	6 Oct 202509:01	–	githubexploit
Circl	CVE-2025-51586	8 Sep 202519:27	–	circl
CNNVD	PrestaShop 安全漏洞	8 Sep 202500:00	–	cnnvd
CVE	CVE-2025-51586	8 Sep 202500:00	–	cve
Cvelist	CVE-2025-51586	8 Sep 202500:00	–	cvelist
EUVD	EUVD-2025-27151	3 Oct 202520:07	–	euvd
Github Security Blog	Presta Shop vulnerable to email enumeration	4 Sep 202520:01	–	github
Nuclei	PrestaShop - Information Disclosure	4 Feb 202607:00	–	nuclei
NVD	CVE-2025-51586	8 Sep 202517:15	–	nvd
OSV	BIT-PRESTASHOP-2025-51586	15 Sep 202505:49	–	osv

Vulners

Node

prestashop prestashop/prestashopRange1.5.5.0–8.2.2php

prestashop prestashop/prestashopMatch1.7.0.0php

prestashop prestashop/prestashopMatch1.7.0.0-beta.1.0php

prestashop prestashop/prestashopMatch1.7.0.0-beta.2.0php

prestashop prestashop/prestashopMatch1.7.0.0-beta.3.0php

prestashop prestashop/prestashopMatch1.7.0.0-beta.4.0php

prestashop prestashop/prestashopMatch1.7.0.0-rc.0.0php

prestashop prestashop/prestashopMatch1.7.0.0-rc.1.0php

prestashop prestashop/prestashopMatch1.7.0.0-rc.2.0php

prestashop prestashop/prestashopMatch1.7.0.1php

prestashop prestashop/prestashopMatch1.7.0.2php

prestashop prestashop/prestashopMatch1.7.0.3php

prestashop prestashop/prestashopMatch1.7.0.4php

prestashop prestashop/prestashopMatch1.7.0.5php

prestashop prestashop/prestashopMatch1.7.0.6php

prestashop prestashop/prestashopMatch1.7.1.0php

prestashop prestashop/prestashopMatch1.7.1.1php

prestashop prestashop/prestashopMatch1.7.1.2php

prestashop prestashop/prestashopMatch1.7.2.0php

prestashop prestashop/prestashopMatch1.7.2.0-rc.1.0php

prestashop prestashop/prestashopMatch1.7.2.1php

prestashop prestashop/prestashopMatch1.7.2.2php

prestashop prestashop/prestashopMatch1.7.2.3php

prestashop prestashop/prestashopMatch1.7.2.4php

prestashop prestashop/prestashopMatch1.7.2.5php

prestashop prestashop/prestashopMatch1.7.3.0php

prestashop prestashop/prestashopMatch1.7.3.1php

prestashop prestashop/prestashopMatch1.7.3.2php

prestashop prestashop/prestashopMatch1.7.3.3php

prestashop prestashop/prestashopMatch1.7.3.4php

prestashop prestashop/prestashopMatch1.7.4.0php

prestashop prestashop/prestashopMatch1.7.4.0-beta.1php

prestashop prestashop/prestashopMatch1.7.4.1php

prestashop prestashop/prestashopMatch1.7.4.2php

prestashop prestashop/prestashopMatch1.7.4.3php

prestashop prestashop/prestashopMatch1.7.4.4php

prestashop prestashop/prestashopMatch1.7.5.0php

prestashop prestashop/prestashopMatch1.7.5.0-beta.1php

prestashop prestashop/prestashopMatch1.7.5.0-rc.1php

prestashop prestashop/prestashopMatch1.7.5.1php

prestashop prestashop/prestashopMatch1.7.5.2php

prestashop prestashop/prestashopMatch1.7.6.0php

prestashop prestashop/prestashopMatch1.7.6.0-beta.1php

prestashop prestashop/prestashopMatch1.7.6.0-rc.1php

prestashop prestashop/prestashopMatch1.7.6.0-rc.2php

prestashop prestashop/prestashopMatch1.7.6.1php

prestashop prestashop/prestashopMatch1.7.6.2php

prestashop prestashop/prestashopMatch1.7.6.3php

prestashop prestashop/prestashopMatch1.7.6.4php

prestashop prestashop/prestashopMatch1.7.6.5php

prestashop prestashop/prestashopMatch1.7.6.6php

prestashop prestashop/prestashopMatch1.7.6.7php

prestashop prestashop/prestashopMatch1.7.6.8php

prestashop prestashop/prestashopMatch1.7.6.9php

prestashop prestashop/prestashopMatch1.7.7.0php

prestashop prestashop/prestashopMatch1.7.7.0-beta.1php

prestashop prestashop/prestashopMatch1.7.7.0-beta.2php

prestashop prestashop/prestashopMatch1.7.7.0-rc.1php

prestashop prestashop/prestashopMatch1.7.7.1php

prestashop prestashop/prestashopMatch1.7.7.2php

prestashop prestashop/prestashopMatch1.7.7.3php

prestashop prestashop/prestashopMatch1.7.7.4php

prestashop prestashop/prestashopMatch1.7.7.5php

prestashop prestashop/prestashopMatch1.7.7.6php

prestashop prestashop/prestashopMatch1.7.7.7php

prestashop prestashop/prestashopMatch1.7.7.8php

prestashop prestashop/prestashopMatch1.7.8.0php

prestashop prestashop/prestashopMatch1.7.8.0-beta.1php

prestashop prestashop/prestashopMatch1.7.8.0-rc.1php

prestashop prestashop/prestashopMatch1.7.8.1php

prestashop prestashop/prestashopMatch1.7.8.10php

prestashop prestashop/prestashopMatch1.7.8.11php

prestashop prestashop/prestashopMatch1.7.8.2php

prestashop prestashop/prestashopMatch1.7.8.3php

prestashop prestashop/prestashopMatch1.7.8.4php

prestashop prestashop/prestashopMatch1.7.8.5php

prestashop prestashop/prestashopMatch1.7.8.6php

prestashop prestashop/prestashopMatch1.7.8.7php

prestashop prestashop/prestashopMatch1.7.8.8php

prestashop prestashop/prestashopMatch1.7.8.9php

prestashop prestashop/prestashopMatch8.0.0php

prestashop prestashop/prestashopMatch8.0.0-beta.1php

prestashop prestashop/prestashopMatch8.0.0-rc.1php

prestashop prestashop/prestashopMatch8.0.1php

prestashop prestashop/prestashopMatch8.0.2php

prestashop prestashop/prestashopMatch8.0.3php

prestashop prestashop/prestashopMatch8.0.4php

prestashop prestashop/prestashopMatch8.0.5php

prestashop prestashop/prestashopMatch8.1.0php

prestashop prestashop/prestashopMatch8.1.0-beta.1php

prestashop prestashop/prestashopMatch8.1.0-rc.1php

prestashop prestashop/prestashopMatch8.1.1php

prestashop prestashop/prestashopMatch8.1.2php

prestashop prestashop/prestashopMatch8.1.3php

prestashop prestashop/prestashopMatch8.1.4php

prestashop prestashop/prestashopMatch8.1.5php

prestashop prestashop/prestashopMatch8.1.6php

prestashop prestashop/prestashopMatch8.1.7php

prestashop prestashop/prestashopMatch8.2.0php

prestashop prestashop/prestashopMatch8.2.1php

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-51586
github	www.github.com/PrestaShop/PrestaShop/releases/tag/8.2.1
prestashop	www.prestashop.com/
github	www.github.com/PrestaShop/PrestaShop/releases/tag/8.2.3
github	www.github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8xx5-h6m3-jr33
github	www.github.com/PrestaShop/PrestaShop/commit/c97bdf10f77fedbe5a61a1dec5f96b3abb1d76fb
build	www.build.prestashop-project.org/news/2025/prestashop-8-2-3-security-release
maxime-morel	www.maxime-morel.github.io/advisories/2025/CVE-2025-51586.md
github	www.github.com/PrestaShop/PrestaShop

13 Dec 2025 05:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.13.7

EPSS0.0103

SSVC