In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0.
{
"cpe": "cpe:2.3:a:prestashop:dashboard_products:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "2.1.0"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
]
}