Skip to main content

Canadapost

1 CVEs product

Monthly

CVE-2012-5799 Nov 04, 22:55 MEDIUM POC This Month

The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Prestashop Canadapost Presto Changeo
NVD
CVSS 2.0
5.8
EPSS
0.1%
EPSS 0% CVSS 5.8
MEDIUM POC This Month

The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Prestashop +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy