Sonice Retour vulnerabilities

1 known vulnerability in Sonice Retour from Common-services. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  common_services_for_prestashop: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45382Nov 17, 2023Sonice Retour

  In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of contr