GHSA-xfm3-hjcc-gv78

Any value can be changed in the configuration table by an employee having access to block reassurance module

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-47110

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	prestashop/blockreassurance	< 5.1.4	5.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact An ajax function in module blockreassurance allows modifying any value in the configuration table ### Patches v5.1.4 ### Workarounds no workaround available ### References

References

External links from the advisory. They lead to third-party sites.

https://github.com/PrestaShop/blockreassurance/security/advisories/GHSA-xfm3-hjcc-gv78 web
https://nvd.nist.gov/vuln/detail/CVE-2023-47110 advisory
https://github.com/PrestaShop/blockreassurance/commit/0a74bf1ebb907eef39e235a3a6dca0c28ed3ad23 web
https://github.com/PrestaShop/blockreassurance package
https://github.com/PrestaShop/blockreassurance/releases/tag/v5.1.4 web