Prestalife

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-26469 Mar 03, 10:15 HIGH This Week

Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service CSRF SSRF Product Designer Prestalife

NVD GitHub

CVSS 3.1

8.1

EPSS

0.3%

CVE-2024-24302 Mar 03, 09:15 CRITICAL Act Now

An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Deserialization Product Designer Prestalife

NVD GitHub

CVSS 3.1

9.8

EPSS

0.9%

CVE-2024-24307 Mar 03, 08:15 HIGH This Week

Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Product Designer Prestalife

NVD GitHub

CVSS 3.1

7.5

EPSS

0.7%

CVE-2024-26469

EPSS 0% CVSS 8.1

HIGH This Week

Denial Of Service CSRF SSRF +2

NVD GitHub

CVE-2024-24302

EPSS 1% CVSS 9.8

CRITICAL Act Now

RCE Deserialization Product Designer +1

NVD GitHub

CVE-2024-24307

EPSS 1% CVSS 7.5

HIGH This Week

Path Traversal Product Designer Prestalife

NVD GitHub