CVE-2023-30199: Path Traversal
Published May 19, 2023
·Updated
Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php.
Affected Software
1 affected component
Webbax Customexporter Prestashop<=1.7.20
Remediation
Event History
May 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-30199?
CVE-2023-30199 is a vulnerability in Prestashop customexporter versions up to and including 1.7.20 that allows for incorrect access control via modules/customexporter/downloads/download.php.
2
What is the severity of CVE-2023-30199?
The severity of CVE-2023-30199 is high with a CVSS score of 7.5.
3
Which software versions are affected by CVE-2023-30199?
Prestashop customexporter versions up to and including 1.7.20 are affected by CVE-2023-30199.
4
How can I fix CVE-2023-30199?
To fix CVE-2023-30199, you should update to a patched version of Prestashop customexporter.
5
Are there any references for CVE-2023-30199?
Yes, you can find more information about CVE-2023-30199 in the security advisories from Friends of Presta and the GitHub repository of PrestaShop.