Unrated severityNVD Advisory· Published Oct 31, 2023· Updated Sep 5, 2024

CVE-2023-46356

Description

In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts() has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bl Modules/CSV Feeds PROdescription
Prestashop/CSV Feeds PRO (csvfeeds)llm-create
Range: <2.6.1

Patches

Vulnerability mechanics

References

security.friendsofpresta.org/modules/2023/10/26/csvfeeds-89.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000