CVE-2020-15079

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-15079

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15079.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-15079

Aliases

GHSA-xp3x-3h8q-c386

Published

2020-07-02T17:15:12Z

Modified

2026-10-24T10:47:47Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "1.7.6.6"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "prestashop:prestashop"
        }
    ]
}

References

Affected packages

Git / github.com/prestashop/prestashop

Affected ranges

Type

GIT

Repo

https://github.com/prestashop/prestashop

Events

Introduced

Fixed

b2956eec991d4bdc0651862557afc472c04ae8cc

Fixed

8833d9504cc5d69a2a6d10197f56f0c11443cbfa

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.7.6.6"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "8833d9504cc5d69a2a6d10197f56f0c11443cbfa"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

1.*

1.6.0.1

1.6.0.3

1.6.1.0

1.7.0.0-beta.1.0

1.7.0.0-beta.2.0

1.7.0.0-beta.4.0

1.7.0.0-rc.0.0

1.7.6.0

1.7.6.0-rc.1

1.7.6.0-rc.2

1.7.6.1

1.7.6.3

1.7.6.4

1.7.6.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15079.json"