What is GHSA-xfm3-hjcc-gv78?

GHSA-xfm3-hjcc-gv78 is a security advisory published by GitHub Security Advisories with Medium severity. Any value can be changed in the configuration table by an employee having access to block reassurance module

Which CVE IDs does GHSA-xfm3-hjcc-gv78 cover?

GHSA-xfm3-hjcc-gv78 covers the following CVE IDs: CVE-2023-47110. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xfm3-hjcc-gv78?

GHSA-xfm3-hjcc-gv78 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-xfm3-hjcc-gv78?

GHSA-xfm3-hjcc-gv78 affects 1 product, including: composer/prestashop/blockreassurance:\u003c= 5.1.3.

GHSA-xfm3-hjcc-gv78MediumCVSS 5.3

Any value can be changed in the configuration table by an employee having access to block reassurance module

Vendor

GitHub Security Advisories

Published

November 9, 2023

Last Modified

November 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-47110 →

📋 Description

Impact

An ajax function in module blockreassurance allows modifying any value in the configuration table

Patches

v5.1.4

Workarounds

no workaround available

References

🎯 Affected products1

composer/prestashop/blockreassurance:<= 5.1.3

🔗 References (5)

https://github.com/PrestaShop/blockreassurance/security/advisories/GHSA-xfm3-hjcc-gv78
https://github.com/PrestaShop/blockreassurance/commit/0a74bf1ebb907eef39e235a3a6dca0c28ed3ad23
https://github.com/PrestaShop/blockreassurance/releases/tag/v5.1.4
https://nvd.nist.gov/vuln/detail/CVE-2023-47110
https://github.com/advisories/GHSA-xfm3-hjcc-gv78