CVE-2024-24309

2024-02-2300:00:00

mitre

github.com

survey tma

ecomiz

prestashop

security

vulnerability

personal information

download

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

In the module “Survey TMA” (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download personal information without restriction.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ecomiz:ecomiz_survey_tma:*:*:*:*:*:prestashop:*:*"
    ],
    "vendor": "ecomiz",
    "product": "ecomiz_survey_tma",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.0.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]