Critical severity9.8NVD Advisory· Published Oct 19, 2023· Updated Jun 17, 2026

CVE-2023-43986

Description

DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DM Concept/Configurator3 versions
cpe:2.3:a:dmconcept:configurator:*:*:*:*:*:prestashop:*:*+ 2 more
- cpe:2.3:a:dmconcept:configurator:*:*:*:*:*:prestashop:*:*range: <4.9.4
- (no CPE)
- (no CPE)range: <4.9.4

Patches

Vulnerability mechanics

References

security.friendsofpresta.org/modules/2023/10/19/configurator.htmlnvdThird Party Advisory
addons.prestashop.com/fr/declinaisons-personnalisation/20343-configurateur-avance-de-produit-sur-mesure-par-etape.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000