{"id":"CVE-2023-39526","published":"2023-08-07T20:28:59Z","modified":"2024-10-10T19:06:10Z","title":"PrestaShopSQL manager vulnerability (potential RCE)","vendor":"PrestaShop","product":"PrestaShop","tier":"tail","description":{"text":"PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01693,"percentile":0.7709,"provenance":"source"},"cwes":[{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command"}],"references":[{"url":"https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gf46-prm4-56pc","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09","tags":["x_refsource_MISC"]}],"priority":{"score":26.8,"factors":[{"name":"EPSS percentile","points":15.42},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.37}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2023-08-10","earliestUrl":"https://github.com/dnkhack/fixcve2023_39526_2023_39527","repos":[{"name":"dnkhack/fixcve2023_39526_2023_39527","url":"https://github.com/dnkhack/fixcve2023_39526_2023_39527","stars":3,"created":"2023-08-10"}]},"first":{"date":"2023-08-10","source":"PoC-in-GitHub","url":"https://github.com/dnkhack/fixcve2023_39526_2023_39527"},"provenance":"source"},"vendorSlug":"prestashop","affectedVersions":[{"vendor":"PrestaShop","product":"PrestaShop","versions":["< 1.7.8.10",">= 8.0.0, < 8.0.5","= 8.1.0"]}],"affected":[{"ecosystem":"Packagist","package":"prestashop/prestashop","vulnerableRanges":[">=8.1.0, <8.1.1",">=8.0.0, <8.0.5","<1.7.8.10"],"patched":["8.1.1","8.0.5","1.7.8.10"],"from":["GHSA-gf46-prm4-56pc"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-2292","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-prestashop-cve-2023-30545","parents":[{"from":"CVE-2023-30839","to":"CVE-2023-39526","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:prestashop/prestashop","fromFixed":"1.7.8.9","toFixed":"1.7.8.10","daysApart":104},{"kind":"version-step","provenance":"source","package":"Packagist:prestashop/prestashop","fromFixed":"8.0.4","toFixed":"8.0.5","daysApart":104},{"kind":"same-code","provenance":"machine","files":["classes/db/Db.php"],"commits":["https://github.com/PrestaShop/PrestaShop/commit/0f2a9b7fdd42d1dd3b21d4fad586a849642f3c30","https://github.com/PrestaShop/PrestaShop/commit/d1d27dc371599713c912b71bc2a455cacd7f2149","https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09"],"basis":"shared function","functions":["executeS"]},{"kind":"similar","provenance":"machine","score":0.44,"basis":"same product + CWE + description similarity"}]},{"from":"CVE-2023-30545","to":"CVE-2023-39526","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["classes/RequestSql.php"],"commits":["https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630","https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81","https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09"],"basis":"shared function","functions":["RequestSqlCore"]}]}],"packageHistory":[{"cve":"CVE-2023-30839","published":"2023-04-25","fixed":"8.0.4","kev":false},{"cve":"CVE-2023-39524","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2023-39525","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2023-39526","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2023-39527","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2023-39528","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2023-39529","published":"2023-08-07","fixed":"8.1.1","kev":false},{"cve":"CVE-2024-21627","published":"2024-01-02","fixed":"8.1.3","kev":false,"link":{"from":"CVE-2023-39526","to":"CVE-2024-21627","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:prestashop/prestashop","fromFixed":"1.7.8.10","toFixed":"1.7.8.11","daysApart":148}]}}],"package":"Packagist:prestashop/prestashop"}}