Description

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.

Remediation

References

CVE-2020-4074

Related Vulnerabilities

Python CVE-2018-1060 Vulnerability (CVE-2018-1060)

WordPress Plugin Contact Form X Cross-Site Scripting (2.4)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23599)

MySQL CVE-2020-2804 Vulnerability (CVE-2020-2804)

Drupal Improper Input Validation Vulnerability (CVE-2012-1589)

Severity

Critical

Classification

CVE-2020-4074 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities