← back
CVE-2020-5288mediumCWE-284

Improper access control on product attributes page in PrestaShop

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.1epss 0.7%
exploitation probability
0.7%top 52% of all CVEs
observed exploitation
nono source reports it
"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Affected products
PrestaShop · PrestaShop