NetSight
high7.5

CVE-2024-34991

In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / post…

Impact

In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email / etc. without restriction due to a lack of permissions control.

Affected products

ProductAffected versions
Module "Axepta" (Axepta)
before 1.3.4

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References