1. Home
  2. CVE Database
  3. CVE-2023-47109
MEDIUM · 5.5

CVE-2023-47109

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO us...

Vulnerability Description

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image. When deleting the block from the BO, the file will be deleted. It is possible to make the website completely unavailable by removing index.php for example. This issue has been patched in version 5.1.4.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
PrestashopCustomer Reassurance Block< 5.1.4

Related Weaknesses (CWE)

CWE-285

References

FAQ

What is CVE-2023-47109?

CVE-2023-47109 is a vulnerability with a CVSS score of 5.5 (MEDIUM). PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO us...

How severe is CVE-2023-47109?

CVE-2023-47109 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-47109?

Check the references section above for vendor advisories and patch information. Affected products include: Prestashop Customer Reassurance Block.