High severity7.5NVD Advisory· Published Jun 24, 2024· Updated Apr 15, 2026

CVE-2024-34991

Description

In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email / etc. without restriction due to a lack of permissions control.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aimeos/Axeptainferred2 versions
<1.3.4+ 1 more
- (no CPE)range: <1.3.4
- (no CPE)range: <1.3.4
Package: https://packagist.org/packages/quadrainformatique/axepta

Patches

Vulnerability mechanics

References

security.friendsofpresta.org/modules/2024/06/20/axepta.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000