Description

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.

Remediation

References

CVE-2018-13784

Related Vulnerabilities

MyBB Cryptographic Issues Vulnerability (CVE-2010-4626)

Joomla Improper Input Validation Vulnerability (CVE-2006-4468)

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-48566)

WordPress Plugin Participants Database Multiple Vulnerabilities (1.7.5.3)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-4313)

Severity

Critical

Classification

CVE-2018-13784 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities