GHSA-qv6h-pcf2-2w3g

ghsaUSosv

Duplicate Advisory GHSA-hrgx-p36p-89q4

view advisory published 2022-07-23Licence: CC-BY-4.0

## Duplicate Advisory This advisory is a duplicate of GHSA-hrgx-p36p-89q4. This link is maintained to preserve external references. ## Original Description PrestaShop 1.6.0.10 through 1.7.x before 1.7.8.2 allows remote attackers to execute arbitrary code, aka a "previously unknown vulnerability chain" related to SQL injection, as exploited in the wild in July 2022.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-36408US	—	—	—	2022-07-22
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-31181. Reason: This candidate is a duplicate of CVE-2022-31181. A typo caused the wrong ID to be used. Notes…

references

External citations — patches, advisories, analysis.

https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websitesWEB
https://github.com/PrestaShop/PrestaShopPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2022-36408ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan