~ / search / GHSA-6jmf-2pfc-q9m7

GHSA-6jmf-2pfc-q9m7

PrestaShop allows users to uninstall modules from backoffice, even with low rights

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-43663

Packages

EcosystemPackageAffectedFixed in
Packagist prestashop/prestashop < 8.1.2 8.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Any module can be disabled or uninstalled from back office, even with low user right. ### Patches 8.1.2 ### Workarounds none ### References

References

External links from the advisory. They lead to third-party sites.