CVE-2024-25842: High severity prestashop account manager vulnerability
An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo() and postProcess methods.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25842?
CVE-2024-25842 is classified as a high-severity vulnerability due to its potential for privilege escalation and exposure of sensitive information.
How do I fix CVE-2024-25842?
To fix CVE-2024-25842, you should upgrade to PrestaShop version 9.0 or later, which addresses the vulnerability.
What methods are exploited in CVE-2024-25842?
CVE-2024-25842 exploits the uploadLogo() and postProcess methods within the affected module.
Who is affected by CVE-2024-25842?
CVE-2024-25842 affects users of the Presta World "Account Manager - Sales Representative & Dealers - CRM" module on PrestaShop versions prior to 9.0.
Can CVE-2024-25842 lead to data breaches?
Yes, CVE-2024-25842 can lead to data breaches by allowing unauthorized users to access sensitive information through privilege escalation.