CVE-2023-34577

Summary

CVE-2023-34577 is a newly disclosed SQL injection vulnerability affecting the OpartPlannedPopupModuleFrontController class in Prestashop versions 1.4.11 and older. This issue enables remote attackers to execute arbitrary SQL commands by exploiting the prepareHook() method. Successful exploitation could lead to unauthorized access, data theft, or even system compromise. It is essential for Prestashop users to update their software to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.