Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component delete_excluded_folder.php.
References
Link | Resource |
---|---|
https://security.friendsofpresta.org/modules/2023/10/03/testsitecreator.html | Patch Third Party Advisory |
https://security.friendsofpresta.org/modules/2023/10/03/testsitecreator.html | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 08:25
Type | Values Removed | Values Added |
---|---|---|
References | () https://security.friendsofpresta.org/modules/2023/10/03/testsitecreator.html - Patch, Third Party Advisory |
19 Sep 2024, 20:35
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-05 20:15
Updated : 2024-11-21 08:25
NVD link : CVE-2023-43981
Mitre link : CVE-2023-43981
CVE.ORG link : CVE-2023-43981
JSON object : View
Products Affected
presto-changeo
- test_site_creator
CWE
CWE-502
Deserialization of Untrusted Data