CVE-2024-24302

EPSS 1.59%
Veröffentlicht 03.03.2024 09:15:06
Zuletzt bearbeitet 15.05.2025 21:13:38
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Prestalife ≫ Product Designer SwPlatformprestashop Version < 1.178.36

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.59%	0.809

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-502.md

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-24302

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-24302

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-24302

EUVD