CVE-2024-25839

EPSS 0.09%
Veröffentlicht 03.03.2024 09:15:06
Zuletzt bearbeitet 15.05.2025 21:14:33
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Webbax ≫ Super Newsletter SwPlatformprestashop Version <= 1.4.21

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.266

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-supernewsletter.md

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-25839

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-25839

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-25839

EUVD