CVE-2023-45383

Summary

CVE-2023-45383 is a vulnerability affecting the "SoNice etiquetage" module in Common-Services for PrestaShop, specifically versions up to 2.5.9. This issue allows unauthenticated guests to download personal information without restriction through a path traversal attack. The vulnerability stems from insufficient permissions control and inadequate path name construction, enabling attackers to access and view all files on the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.