CVE-2023-33493
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
The Ajaxmanager File and Database explorer module for PrestaShop through version 2.3.0 has an Unrestricted Upload of File with Dangerous Type vulnerability. This allows remote attackers to upload dangerous files without restrictions.
Risk Assessment
The organization may be exposed to attacks that exploit the upload of malicious files, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update the Ajaxmanager module to the latest version and implement additional security measures to restrict the upload of dangerous files.
Original NVD description (English source)
An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer (ajaxmanager) module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions.