Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the postProcess() method.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-918.md | Third Party Advisory |
| https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-918.md | Third Party Advisory |
Configurations
History
13 May 2025, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-918.md - Third Party Advisory | |
| CPE | cpe:2.3:a:prestalife:product_designer:*:*:*:*:*:*:*:* | |
| First Time |
Prestalife product Designer
Prestalife |
03 Mar 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-03 10:15
Updated : 2025-05-13 14:22
NVD link : CVE-2024-26469
Mitre link : CVE-2024-26469
JSON object : View
Products Affected
prestalife
- product_designer
CWE
No CWE.
