CVE-2023-31671: SQL Injection
Published Jun 14, 2023
·Updated
PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess().
Affected Software
1 affected component
Webbax Postfinance Prestashop<17.1.14
Remediation
Event History
Jun 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-31671.
2
What is the title of the vulnerability?
The title of the vulnerability is 'PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess()'.
3
What is the severity of the vulnerability?
The severity of the vulnerability is critical, with a CVSS score of 9.8.
4
What software is affected by this vulnerability?
PrestaShop postfinance <= 17.1.13 is affected by this vulnerability.
5
How can I fix the vulnerability?
To fix the vulnerability, upgrade to a version higher than 17.1.13 of PrestaShop postfinance.