hitoshura25/cvefixes huggingface dataset:
CVE-2020-5293 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5.
Severity: MEDIUM (CVSS v3 base score: 6.5)
Weakness: CWE-863 \u2014 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-cvjj-grfv-f56w

Add @AdminSecurity annotations

Vulnerable code:

Fixed code:
CVE-2021-21302 (Unknown, published 2021-02-26T20:15Z)
Description: value: PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2
Severity: MEDIUM (CVSS v3 base score: 7.2)
Weakness: CWE-1236 \u2014 Improper Neutralization of Formula Elements in a CSV File
The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-2rw4-2p99-cmx9

Escape characters during module csv export

Vulnerable code:

Fixed code:
CVE-2021-21308 (Unknown, published 2021-02-26T20:15Z)
Description: value: PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2
Severity: MEDIUM (CVSS v3 base score: 9.1)
Weakness: CWE-287 \u2014 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-557h-hf3c-whcg

Make sure session is cleared using soft logout

Vulnerable code:

Fixed code:
CVE-2021-21398 (Unknown, published 2021-03-30T16:15Z)
Description: value: PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3
Severity: LOW (CVSS v3 base score: 5.4)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-fhhq-4x46-qx77


Vulnerable code:

Fixed code:
CVE-2022-21686 (Unknown, published 2022-01-26T20:15Z)
Description: value: PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.
Severity: HIGH (CVSS v3 base score: 9.8)
Weakness: CWE-94 \u2014 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-mrq4-7ch7-2465

Properly escape smarty output for twig

Vulnerable code:

Fixed code:
CVE-2022-31181 (Unknown, published 2022-08-01T20:15Z)
Description: value: PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users unable to upgrade may delete the MySQL Smarty cache feature.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-hrgx-p36p-89q4

Crypt/decrypt smarty cache in DB

Vulnerable code:

Fixed code:
CVE-2022-46158 (Unknown, published 2022-12-08T22:15Z)
Description: value: PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to upgrade to version 1.7.8.8. There are no known workarounds for this issue.
Severity: nan (CVSS v3 base score: 4.3)
Weakness: CWE-862 \u2014 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-9qgp-9wwc-v29r

User needs to have rights to see /uploads/* content

Vulnerable code:

Fixed code:
CVE-2023-30545 (Unknown, published 2023-04-25T18:15Z)
Description: value: PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, it is possible for a user with access to the SQL Manager (Advanced Options -> Database) to arbitrarily read any file on the operating system when using SQL function `LOAD_FILE` in a `SELECT` request. This gives the user access to critical information. A patch is available in PrestaShop 8.0.4 and PS 1.7.8.9

Severity: nan (CVSS v3 base score: 6.5)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-8r4m-5p6p-52rp

Fix arbitrary file ready through sql manager

Vulnerable code:

Fixed code:
CVE-2023-30838 (Unknown, published 2023-04-25T19:15Z)
Description: value: PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the `ValidateCore::isCleanHTML()` method of Prestashop misses hijackable events which can lead to cross-site scripting (XSS) injection, allowed by the presence of pre-setup `@keyframes` methods. This XSS, which hijacks HTML attributes, can be triggered without any interaction by the visitor/administrator, which makes it as dangerous as a trivial XSS attack. Contrary to other attacks which target HTML attributes and are triggered without user interaction (such as onload / onerror which suffer from a very limited scope), this one can hijack every HTML element, which increases the danger due to a complete HTML elements scope. Versions 8.0.4 and 1.7.8.9 contain a fix for this issue.
Severity: nan (CVSS v3 base score: 9.9)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-fh7r-996q-gvcp

add missing events in isCleanHtml

Vulnerable code:

Fixed code:
CVE-2023-30839 (Unknown, published 2023-04-25T19:15Z)
Description: value: PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 8.8)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-p379-cxqh-q822

Fix executeS method making sure it does selection only

Vulnerable code:

Fixed code:
CVE-2023-39524 (Unknown, published 2023-08-07T20:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-75p5-jwx4-qw9h/fix-advisory-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39525 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 9.1)
Weakness: CWE-22 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-m9r4-3fg7-pqm2/8.1.x' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39526 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-gf46-prm4-56pc/fix-advisory-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39527 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-116 \u2014 Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-xw2r-f8xv-c8xp/fix-advisory-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39527 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-xw2r-f8xv-c8xp/fix-advisory-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39528 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 8.6)
Weakness: CWE-22 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-hpf4-v7v2-95p2/fix-advisory-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39529 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachments controller and the Attachments API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 9.1)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-2rf5-3fw8-qm47/advisory-fix-3' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-39530 (Unknown, published 2023-08-07T21:15Z)
Description: value: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Severity: nan (CVSS v3 base score: 9.1)
Weakness: CWE-20 \u2014 Improper Input Validation
The product receives input or data, but it does
        not validate or incorrectly validates that the input has the
        properties that are required to process the data safely and
        correctly.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'ghsa-v4gr-v679-42p7/advisory-fix-1' into release/8.1.1


Vulnerable code:

Fixed code:
CVE-2023-43663 (Unknown, published 2023-09-28T19:15Z)
Description: value: PrestaShop is an Open Source e-commerce web application. In affected versions any module can be disabled or uninstalled from back office, even with low user right. This allows low privileged users to disable portions of a shops functionality. Commit `ce1f6708` addresses this issue and is included in version 8.1.2. Users are advised to upgrade. There are no known workarounds for this issue.
Severity: nan (CVSS v3 base score: 4.3)
Weakness: CWE-269 \u2014 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-6jmf-2pfc-q9m7

Filter dashboard hooks in ajax method

Vulnerable code:

Fixed code:
CVE-2023-43664 (Unknown, published 2023-09-28T19:15Z)
Description: value: PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface, an employee can list all modules without any access rights: method `ajaxProcessGetPossibleHookingListForModule` doesn't check access rights. This issue has been addressed in commit `15bd281c` which is included in version 8.1.2. Users are advised to upgrade. There are no known workaround for this issue.
Severity: nan (CVSS v3 base score: 4.3)
Weakness: CWE-269 \u2014 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-gvrg-62jp-rf7j

Check user has view access before fetching module hooks

Vulnerable code:

Fixed code:
CVE-2024-21627 (Unknown, published 2024-01-02T21:15Z)
Description: value: PrestaShop is an open-source e-commerce platform. Prior to versions 8.1.3 and 1.7.8.11, some event attributes are not detected by the `isCleanHTML` method. Some modules using the `isCleanHTML` method could be vulnerable to cross-site scripting. Versions 8.1.3 and 1.7.8.11 contain a patch for this issue. The best workaround is to use the `HTMLPurifier` library to sanitize html input coming from users. The library is already available as a dependency in the PrestaShop project. Beware though that in legacy object models, fields of `HTML` type will call `isCleanHTML`.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch '46rq/advisory-fix-1' into 8.1.x


Vulnerable code:

Fixed code:
CVE-2024-21628 (Unknown, published 2024-01-02T22:15Z)
Description: value: PrestaShop is an open-source e-commerce platform. Prior to version 8.1.3, the isCleanHtml method is not used on this this form, which makes it possible to store a cross-site scripting payload in the database. The impact is low because the HTML is not interpreted in BO, thanks to twig's escape mechanism. In FO, the cross-site scripting attack is effective, but only impacts the customer sending it, or the customer session from which it was sent. This issue affects those who have a module fetching these messages from the DB and displaying it without escaping HTML. Version 8.1.3 contains a patch for this issue.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge remote-tracking branch 'm4wf/advisory-fix-1' into 8.1.x


Vulnerable code:

Fixed code:
CVE-2024-26129 (Unknown, published 2024-02-19T22:15Z)
Description: value: PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.
Severity: nan (CVSS v3 base score: )
Weakness: CWE-22 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-3366-9287-7qpr

Fix theme_dir tpl variable

Vulnerable code:

Fixed code: