In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with extensions .php.
Metrics
Affected Vendors & Products
References
History
Thu, 08 Aug 2024 21:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-434 | |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-02-27T00:00:00
Updated: 2024-08-08T20:10:19.815Z
Reserved: 2024-02-12T00:00:00
Link: CVE-2024-25846
Vulnrichment
Updated: 2024-08-01T23:52:06.091Z
NVD
Status : Awaiting Analysis
Published: 2024-02-27T17:15:12.287
Modified: 2024-08-08T20:35:05.147
Link: CVE-2024-25846
Redhat
No data.