aicombinationsonfly- PrestaShop module vulnerability (CVE-2023-33664)

Moduleaicombinationsonfly

Score

8.8 High

Date publish

07-07-2023

Versiones afectadas

  • Less than 0.3.1

Description

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.

References

Metrics

cvssMetricV31
sourcenvd@nist.gov
typePrimary
version3.1
vectorStringCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore8.8
baseSeverityHIGH
attackVectorNETWORK
attackComplexityLOW
privilegesRequiredLOW
userInteractionNONE
scopeUNCHANGED
confidentialityImpactHIGH
integrityImpactHIGH
availabilityImpactHIGH
exploitabilityScore2.8
impactScore5.9
Scroll al inicio