CVE-2023-43984

https://notcve.org/view.php?id=CVE-2023-43984

07 Nov 2023 — Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table. Los permisos inseguros en Smart Soft advancedexport anteriores a v4.4.7 permiten a atacantes no autenticados descargar arbitrariamente información de usuario de la tabla ps_customer. • https://security.friendsofpresta.org/modules/2023/11/07/advancedexport.html • CWE-276: Incorrect Default Permissions •