CVE-2023-45382

Summary

CVE-2023-45382 is a vulnerability affecting the "SoNice Retour" module (sonice_retour) in Common-Services for PrestaShop up to version 2.1.0. This issue enables a guest to download sensitive information by executing a path traversal attack. The vulnerability stems from insufficient permissions control and inadequate path name construction, allowing attackers to access and download all files on the targeted system. This can lead to potential data breaches and unauthorized access. Organizations using the affected module are advised to upgrade to the latest version or apply suitable patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.