CVE Vulnerabilities

CVE-2023-39677

Published: Sep 20, 2023 | Modified: Feb 18, 2026
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

Affected Software

NameVendorStart VersionEnd Version
Product_catalog_(csv,_excel)_importMyprestamodules6.2.9 (including)6.2.9 (including)
UpdateproductsUpdateproducts_project3.6.9 (including)3.6.9 (including)

References