high7.5
CVE-2018-19124
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files.
Impact
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Prestashop | from 1.6.0.1 before 1.6.1.23 from 1.7.0.0 before 1.7.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/
- https://github.com/PrestaShop/PrestaShop/pull/11285
- https://github.com/PrestaShop/PrestaShop/pull/11286
- http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/
- https://github.com/PrestaShop/PrestaShop/pull/11285
- https://github.com/PrestaShop/PrestaShop/pull/11286