High 7.5 CVSS 3.1 superuser Published on 2023-10-31

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a…

CVECVE-2023-45899 GHSANo GHSA advisory

View at the source View JSON Last modified at the source: 2026-06-17

Description

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.

Original text by NVD (NIST), public domain.

CVSS metrics 3.1

Source: nvd@nist.gov · primary

High 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vectorNetwork

ComplexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityNone

IntegrityHigh

AvailabilityNone

References

Exploitsecurity.friendsofpresta.org
https://security.friendsofpresta.org/modules/2023/10/26/superuser.html

Found a vulnerability?

Write to the PrestaShop core security team:

security-core@prestashop.com

Do you use the superuser module?

PrestaShield checks it from the outside, without FTP access, and alerts you of every new advisory that affects you.

Check if my shop is affected