CVE-2023-30195 : In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can

In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json.

Published 2023-07-06 20:15:09

Updated 2023-07-13 14:49:31

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-30195

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 43 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-30195

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	MITRE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2023-30195

https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html

[CVE-2023-30195] Exposure of Private Personal Information to an Unauthorized Actor in Linea Grafica - Detailed Order module for PrestaShop | Friends-Of-Presta Security Advisories
Third Party Advisory

Products affected by CVE-2023-30195

Lineagrafica » Lgdetailedorder » For Prestashop
Versions before (<) 1.1.21
cpe:2.3:a:lineagrafica:lgdetailedorder:*:*:*:*:*:prestashop:*:*
Matching versions

Vulnerability Details : CVE-2023-30195

Exploit prediction scoring system (EPSS) score for CVE-2023-30195

CVSS scores for CVE-2023-30195

CWE ids for CVE-2023-30195

References for CVE-2023-30195

Products affected by CVE-2023-30195