CVE-2023-30198: Path Traversal
Published Jun 12, 2023
·Updated
Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.
Affected Software
1 affected component
Webbax Winbizpayment Prestashop<=1.0.2
Event History
Jun 12, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-30198?
CVE-2023-30198 is a vulnerability in Prestashop winbizpayment <= 1.0.2 that allows incorrect access control via modules/winbizpayment/downloads/download.php.
2
How severe is CVE-2023-30198?
The severity of CVE-2023-30198 is rated as high with a CVSS score of 7.5.
3
What software is affected by CVE-2023-30198?
Prestashop winbizpayment version 1.0.2 and below are affected by CVE-2023-30198.
4
How can I fix CVE-2023-30198?
To fix CVE-2023-30198, update to a version of winbizpayment that is higher than 1.0.2.
5
Where can I find more information about CVE-2023-30198?
More information about CVE-2023-30198 can be found at the following references: [1] [2] [3].