Sonice Retour vulnerabilities
We track 1 vulnerability in Sonice Retour products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 17, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sonice Retour vulnerabilities
- 7.5 High severity
common_services_for_prestashop: Improper Limitation of a Pathname to a Restricted Directory
In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of contr