CRITICAL · 9.1

CVE-2023-47110

blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An ajax function in module blockreassurance allows modifying any...

Vulnerability Description

blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An ajax function in module blockreassurance allows modifying any value in the configuration table. This vulnerability has been patched in version 5.1.4.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
PrestashopCustomer Reassurance Block< 5.1.4

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-47110?

CVE-2023-47110 is a vulnerability with a CVSS score of 9.1 (CRITICAL). blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An ajax function in module blockreassurance allows modifying any...

How severe is CVE-2023-47110?

CVE-2023-47110 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-47110?

Check the references section above for vendor advisories and patch information. Affected products include: Prestashop Customer Reassurance Block.