Intrusion PreventionMyPrestaModules.Prestashop.Send.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in MyPrestaModules Prestashop modules.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker can exploit this to gain unauthorized access to sensitive information.
Affected Products
MyPrestaModules Prestashop simpleimportproduct version 6.2.9
MyPrestaModules Prestashop updateproducts version 3.6.9
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://security.friendsofpresta.org/modules/2023/09/08/simpleimportproduct-updateproducts.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-03-27 | 27.756 |
| ID | 54834 |
| Created | Mar 19, 2024 |
| Updated | Mar 27, 2024 |
| Risk |
|
| CVE ID | CVE-2023-39677 |
| Exploit Prediction Score | 0.76% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, MacOS |
| Affected App | PHP_app |