CVE-2018-13784 PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.
CriticalCVSS 9.1
EPSS 16.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| prestashop/prestashop | < 1.6.1.20 | 1.6.1.20 |
| prestashop/prestashop | >= 1.7.0.0, < 1.7.3.4 | 1.7.3.4 |
References
- build.prestashop.com vendor-advisory
- github.com third-party-advisory
- github.com third-party-advisory
- 45046 exploit third-party-advisory vdb-entry
- 45047 exploit third-party-advisory vdb-entry