CVE-2023-27569: SQL Injection
Published Mar 21, 2023
·Updated
The eotags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.
Affected Software
1 affected component
Prestashop Eo Tags>=1.2.0<1.3.0
Event History
Mar 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27569?
CVE-2023-27569 is a critical vulnerability in the eo_tags package before version 1.3.0 for PrestaShop that allows SQL injection via an HTTP User-Agent or Referer header.
2
How severe is CVE-2023-27569?
CVE-2023-27569 has a severity rating of 9.8 (Critical).
3
What software is affected by CVE-2023-27569?
The eo_tags package before version 1.3.0 for PrestaShop is affected by CVE-2023-27569.
4
How can CVE-2023-27569 be exploited?
CVE-2023-27569 can be exploited by performing SQL injection attacks using an HTTP User-Agent or Referer header.
5
How can I fix CVE-2023-27569?
To fix CVE-2023-27569, upgrade to version 1.3.0 or higher of the eo_tags package for PrestaShop.