CVE-2013-4792: CSRF
Published Feb 13, 2020
·Updated
PrestaShop before 1.4.11 allows logout CSRF.
Affected Software
1 affected component
Prestashop PrestaShop<1.4.11
Event History
Feb 13, 2020
CVE Published
via MITRE·11:09 PM
Data Sourced
via MITRE·11:09 PM
Description
Frequently Asked Questions
1
What is CVE-2013-4792?
CVE-2013-4792 is a vulnerability in PrestaShop before version 1.4.11 that allows logout cross-site request forgery (CSRF).
2
How severe is CVE-2013-4792?
CVE-2013-4792 has a severity rating of 5.5 (medium).
3
How does CVE-2013-4792 affect PrestaShop?
CVE-2013-4792 affects PrestaShop versions up to and exclusive of 1.4.11.
4
What is the Common Weakness Enumeration (CWE) for CVE-2013-4792?
CVE-2013-4792 is associated with CWE-352 (Cross-Site Request Forgery (CSRF)).
5
Is there a blog post about CVE-2013-4792?
Yes, you can find more information about CVE-2013-4792 in this blog post: http://davidsopaslabs.blogspot.com/2013/07/prestashop-persistent-xss-and-csrf.html