CVE-2024-25839: Infoleak

Q: What is the severity of CVE-2024-25839?

CVE-2024-25839 has a high severity rating due to the potential for local attackers to escalate privileges and access sensitive information.

Q: Who is affected by CVE-2024-25839?

CVE-2024-25839 affects users of the Webbax Super Newsletter module for PrestaShop versions 1.4.21 and earlier.

Q: How do I fix CVE-2024-25839?

To fix CVE-2024-25839, upgrade the Webbax Super Newsletter module to a version newer than 1.4.21.

Q: What types of attacks are possible due to CVE-2024-25839?

CVE-2024-25839 allows local attackers to escalate privileges, which could lead to unauthorized access and data breaches.

Q: Is there any public disclosure for CVE-2024-25839?

Yes, CVE-2024-25839 has been publicly disclosed, detailing the vulnerability and its implications for affected software.

Published Mar 3, 2024

Updated

An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.

Affected Software

2 affected components

Webbax Super Newsletter Prestashop<=1.4.21

Webbax Super Newsletter<1.4.21

Remediation

Patch Available

https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-supernewsletter.md

Event History

Mar 3, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-25839?

CVE-2024-25839 has a high severity rating due to the potential for local attackers to escalate privileges and access sensitive information.

Who is affected by CVE-2024-25839?