VULNERABILITY INTELLIGENCE

CVE-2020-5293

CVSS score6.5 MEDIUM

EPSS probability0.66%

CISA KEVNot currently listed

Published2020-04-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Description

In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5.

Weakness classification

CWE-284: Improper Access Control
CWE-863: Incorrect Authorization

Primary references

security-advisories@github.com — Patch, Third Party Advisory
security-advisories@github.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory