Critical 9.1 CVSS 3.1 blockreassurance Published on 2023-11-09

Any value can be changed in the configuration table by an employee having access to block reassurance module

CVECVE-2023-47110 GHSAGHSA-xfm3-hjcc-gv78

View at the source View JSON Last modified at the source: 2026-06-17

Description

Any value can be changed in the configuration table by an employee having access to block reassurance module

An ajax function in module blockreassurance allows modifying any value in the configuration table

v5.1.4

no workaround available

Original text by NVD (NIST), public domain.

Source: security-advisories@github.com · secondary

Critical 9.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

Attack vectorNetwork

ComplexityLow

Privileges requiredLow

User interactionNone

ScopeChanged

ConfidentialityLow

IntegrityLow

AvailabilityHigh

Write to the PrestaShop core security team:

Same module: blockreassurance

IDAdvisoryComponentSeverityAffected versionsPublishedFix

PrestaShield checks it from the outside, without FTP access, and alerts you of every new advisory that affects you.