CVE-2023-27570: SQL Injection
Published Mar 21, 2023
·Updated
The eotags package before 1.4.19 for PrestaShop allows SQL injection via a crafted ga cookie.
Affected Software
1 affected component
Prestashop Eo Tags>=1.2.0<1.4.19
Remediation
Patch Available
Event History
Mar 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27570?
CVE-2023-27570 is a vulnerability in the eo_tags package before version 1.4.19 for PrestaShop that allows SQL injection via a crafted _ga cookie.
2
What is the severity of CVE-2023-27570?
CVE-2023-27570 has a severity rating of 9.8 (critical).
3
How can the eo_tags package be affected?
The eo_tags package before version 1.4.19 for PrestaShop is affected by CVE-2023-27570.
4
How does CVE-2023-27570 work?
CVE-2023-27570 works by exploiting a SQL injection vulnerability through a crafted _ga cookie.
5
Is there a fix for CVE-2023-27570?
Yes, the fix for CVE-2023-27570 is to update the eo_tags package to version 1.4.19 or later.