CVE-2023-39529

MediumCVSS 6.7

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

PrestaShop prior to version 8.1.1 allows for file deletion from the server using the Attachments controller and the Attachments API. Version 8.1.1 contains a patch for this issue.

Risk Assessment

The organization may be at risk of data loss or deletion of important files from the server, potentially leading to significant operational disruptions.

Recommendation

It is recommended to upgrade to version 8.1.1 or later to mitigate this vulnerability.

Original NVD description (English source)

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachments controller and the Attachments API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.