Description
Improper access control on dashboard form
Impact
Improper access control WIP
Patches
The problem is fixed in 2.1.0
References
Improper Access Control - Generic (CWE-284)
Thanks to Rabhi
Original text by NVD (NIST), public domain.
CVSS metrics 3.1
Source: security-advisories@github.com · secondaryCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NAttack vectorNetwork
ComplexityLow
Privileges requiredLow
User interactionNone
ScopeUnchanged
ConfidentialityNone
IntegrityHigh
AvailabilityNone
References
Found a vulnerability?
Write to the PrestaShop core security team:
security-core@prestashop.com