CVE-2023-27845

Summary

CVE-2023-27845 is a newly discovered SQL injection vulnerability that affects PrestaShop's lekerawen_ocs before version 1.4.1. An attacker can exploit this flaw in the KerawenHelper::setCartOperationInfo and KerawenHelper::resetCheckoutSessionData components to gain privileges remotely. Successful exploitation of this vulnerability could lead to unauthorized access to sensitive data or the ability to make unauthorized changes to the affected system. It is recommended that users of impacted versions of PrestaShop immediately upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.