PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
References
Link | Resource |
---|---|
http://forge.prestashop.com/browse/BOOM-4613 | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2018-01-13 05:29
Updated : 2024-02-28 16:04
NVD link : CVE-2018-5682
Mitre link : CVE-2018-5682
CVE.ORG link : CVE-2018-5682
JSON object : View
Products Affected
prestashop
- prestashop
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor