1 results (0.001 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

31 May 2023 — Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack. • https://friends-of-presta.github.io/security-advisories/modules/2023/05/30/myinventory.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •