CVE-2024-2759

{"id": "CVE-2024-2759", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-04-04T14:15:10.220", "references": [{"url": "https://cert.pl/en/posts/2024/04/CVE-2024-2759/", "source": "cvd@cert.pl"}, {"url": "https://cert.pl/posts/2024/04/CVE-2024-2759/", "source": "cvd@cert.pl"}, {"url": "https://cert.pl/en/posts/2024/04/CVE-2024-2759/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://cert.pl/posts/2024/04/CVE-2024-2759/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-552"}]}], "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authentication.This issue affects Apaczka plugin for PrestaShop from v1 through v4."}, {"lang": "es", "value": "Una vulnerabilidad de control de acceso inadecuado en el complemento Apaczka para PrestaShop permite la recopilaci\u00f3n de informaci\u00f3n de plantillas guardadas sin autenticaci\u00f3n. Este problema afecta al complemento Apaczka para PrestaShop desde la v1 hasta la v4."}], "lastModified": "2024-11-21T09:10:27.093", "sourceIdentifier": "cvd@cert.pl"}