high7.5
CVE-2023-30282
PrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control.
Impact
PrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of permissions' control, a guest can access exports from the module which can lead to leak of personal information from customer table.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Scexportcustomers | through 3.6.1 |