Vulnerability Description
PrestaShop before 1.4.11 allows logout CSRF.
CVSS Score
5.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prestashop | Prestashop | < 1.4.11 |
Related Weaknesses (CWE)
References
- http://davidsopaslabs.blogspot.com/2013/07/prestashop-persistent-xss-and-csrf.htExploitThird Party Advisory
- http://davidsopaslabs.blogspot.com/2013/07/prestashop-persistent-xss-and-csrf.htExploitThird Party Advisory
FAQ
What is CVE-2013-4792?
CVE-2013-4792 is a vulnerability with a CVSS score of 5.5 (MEDIUM). PrestaShop before 1.4.11 allows logout CSRF.
How severe is CVE-2013-4792?
CVE-2013-4792 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4792?
Check the references section above for vendor advisories and patch information. Affected products include: Prestashop Prestashop.