Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-33777

An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.

Published

2023-07-25T01:15:09.240

Last Modified

2024-11-21T08:05:58.693

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	prestashop	amazon	< 5.2.24	Yes

References

https://addons.prestashop.com/fr/marketplace/2501-amazon-market-place.html Vendor Advisory ([email protected])
https://security.friendsofpresta.org/modules/2023/07/13/amazon.html?_sm_pdc=1&_sm_rid=8j3vvHn3kPrR9r7QVvHpFPR9WHVDpvvHP9PLPMj Third Party Advisory ([email protected])
https://addons.prestashop.com/fr/marketplace/2501-amazon-market-place.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.friendsofpresta.org/modules/2023/07/13/amazon.html?_sm_pdc=1&_sm_rid=8j3vvHn3kPrR9r7QVvHpFPR9WHVDpvvHP9PLPMj Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)