Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage() method.
Metrics
Affected Vendors & Products
References
History
Thu, 08 Aug 2024 20:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-22 | |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-03-03T00:00:00
Updated: 2024-08-08T18:32:00.694Z
Reserved: 2024-01-25T00:00:00
Link: CVE-2024-24307
Vulnrichment
Updated: 2024-08-01T23:19:52.095Z
NVD
Status : Awaiting Analysis
Published: 2024-03-03T08:15:08.140
Modified: 2024-08-08T19:35:10.177
Link: CVE-2024-24307
Redhat
No data.