CVE Catalog

CVE-2023-33777

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.63%

45th percentile - higher than 45% of all known CVEs

Summary

An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.

Risk Assessment

A directory traversal attack may allow access to system files, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Prestashop to version 5.2.24 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS