GHSA-75p5-jwx4-qw9h

PrestaShop boolean SQL injection

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-39524

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	prestashop/prestashop	< 8.1.1	8.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact SQL injection possible in product search field, in BO's product page ### Patches 8.1.1 ### Found by Aleksey Solovev (Positive Technologies) ### Workarounds none ### References none

References

External links from the advisory. They lead to third-party sites.

https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-75p5-jwx4-qw9h web
https://nvd.nist.gov/vuln/detail/CVE-2023-39524 advisory
https://github.com/PrestaShop/PrestaShop/commit/2047d4c053043102bc46a37d383b392704bf14d7 web
https://github.com/PrestaShop/PrestaShop package