{"id":"CVE-2023-30545","published":"2023-04-25T17:47:01Z","modified":"2025-02-03T19:36:21Z","title":"PrestaShop arbitrary file read vulnerability","vendor":"PrestaShop","product":"PrestaShop","tier":"tail","description":{"text":"PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, it is possible for a user with access to the SQL Manager (Advanced Options -> Database) to arbitrarily read any file on the operating system when using SQL function `LOAD_FILE` in a `SELECT` request. This gives the user access to critical information. A patch is available in PrestaShop 8.0.4 and PS 1.7.8.9\n","provenance":"source","from":"CVE.org"},"cvss":{"score":7.7,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00863,"percentile":0.58566,"provenance":"source"},"cwes":[{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command"}],"references":[{"url":"https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8r4m-5p6p-52rp","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630","tags":["x_refsource_MISC"]},{"url":"https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81","tags":["x_refsource_MISC"]}],"priority":{"score":17.1,"factors":[{"name":"EPSS percentile","points":11.71},{"name":"CVSS severity","points":5.39}]},"vendorSlug":"prestashop","affectedVersions":[{"vendor":"PrestaShop","product":"PrestaShop","versions":["< 1.7.8.9",">= 8.0.0, < 8.0.4"]}],"affected":[{"ecosystem":"Packagist","package":"prestashop/prestashop","vulnerableRanges":[">=8.0.0, <8.0.4","<1.7.8.9"],"patched":["8.0.4","1.7.8.9"],"from":["GHSA-8r4m-5p6p-52rp"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1243","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-prestashop-cve-2023-30545","children":[{"from":"CVE-2023-30545","to":"CVE-2023-39526","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["classes/RequestSql.php"],"commits":["https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630","https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81","https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09"],"basis":"shared function","functions":["RequestSqlCore"]}]}],"packageHistory":[{"cve":"CVE-2022-31181","published":"2022-08-01","fixed":"1.7.8.7","kev":false},{"cve":"CVE-2022-46158","published":"2022-12-08","fixed":"1.7.8.8","kev":false,"link":{"from":"CVE-2022-46158","to":"CVE-2023-30545","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:prestashop/prestashop","fromFixed":"1.7.8.8","toFixed":"1.7.8.9","daysApart":138}]}},{"cve":"CVE-2023-25170","published":"2023-03-13","fixed":"8.0.1","kev":false,"link":{"from":"CVE-2023-25170","to":"CVE-2023-30545","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:prestashop/prestashop","fromFixed":"8.0.1","toFixed":"8.0.4","daysApart":43}]}},{"cve":"CVE-2023-30545","published":"2023-04-25","fixed":"8.0.4","kev":false},{"cve":"CVE-2023-30838","published":"2023-04-25","fixed":"8.0.4","kev":false},{"cve":"CVE-2023-30839","published":"2023-04-25","fixed":"8.0.4","kev":false},{"cve":"CVE-2023-39524","published":"2023-08-07","fixed":"8.1.1","kev":false}],"package":"Packagist:prestashop/prestashop"}}