CyberSecBulletin

Prestalife vulnerabilities

We track 3 vulnerabilities in Prestalife products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2024.

3vulnerabilities
1critical
2high
0exploited
8.5average CVSS score

Latest Prestalife vulnerabilities

  • 8.1 High severity

    Product Designer: Cross-Site Request Forgery

    CVE-2024-26469Prestalife

    Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the p

  • 9.8 Critical severity

    productdesigner: Deserialization of Untrusted Data

    CVE-2024-24302Prestashopmodules

    An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.

  • 7.5 High severity

    productdesigner: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-24307Prestashopmodules

    Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage() method.