In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json.
References
| Link | Resource |
|---|---|
| https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html | Third Party Advisory |
| https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html - Third Party Advisory |
13 Jul 2023, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Lineagrafica lgdetailedorder
Lineagrafica |
|
| CWE | CWE-862 | |
| References | (MISC) https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html - Third Party Advisory | |
| CPE | cpe:2.3:a:lineagrafica:lgdetailedorder:*:*:*:*:*:prestashop:*:* |
06 Jul 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-06 20:15
Updated : 2024-11-21 07:59
NVD link : CVE-2023-30195
Mitre link : CVE-2023-30195
CVE.ORG link : CVE-2023-30195
JSON object : View
Products Affected
lineagrafica
- lgdetailedorder
CWE
CWE-862
Missing Authorization