CVE-2024-24302: Critical severity tunis soft product designer vulnerability
An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24302?
CVE-2024-24302 is considered a high severity vulnerability due to its potential for remote code execution and privilege escalation.
How do I fix CVE-2024-24302?
To mitigate CVE-2024-24302, upgrade the Tunis Soft Product Designer module to version 1.178.36 or later.
Who is affected by CVE-2024-24302?
CVE-2024-24302 affects users of the Tunis Soft Product Designer module for PrestaShop versions before 1.178.36.
What type of vulnerability is CVE-2024-24302?
CVE-2024-24302 is a remote code execution vulnerability that also allows privilege escalation and unauthorized access to sensitive information.
Can CVE-2024-24302 be exploited remotely?
Yes, CVE-2024-24302 can be exploited remotely by attackers through the vulnerable postProcess() method.