CVE-2024-2759

Published: Apr 4, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authentication.This issue affects Apaczka plugin for PrestaShop from v1 through v4.

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (4)

https://cert.pl/en/posts/2024/04/CVE-2024-2759/

Source: cvd@cert.pl

https://cert.pl/posts/2024/04/CVE-2024-2759/

Source: cvd@cert.pl

https://cert.pl/en/posts/2024/04/CVE-2024-2759/

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert.pl/posts/2024/04/CVE-2024-2759/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.