Prestashop Autoupgrade vulnerabilities

1 known vulnerability affecting prestashop/autoupgrade.

Total CVEs

1

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2017-9841CRITICALCVSS 9.8KEVPoC≥ 4.0.0, < 4.10.12020-01-08

CVE-2017-9841 [CRITICAL] PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841 PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841 ### Impact We have identified that some autoupgrade module ZIP archives have been built with phpunit dev dependencies. PHPUnit contains a php script that would allow, on a webserver, an attacker to perform a RCE. This vulnerability impacts - phpunit before 4.8.28 and 5.x before 5.6.3 as reported in [CVE-2017-9841](