VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026

CVE-2024-41651

CVE-2024-41651

Description

An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality. NOTE: this is disputed by multiple parties, who report that exploitation requires that an attacker be able to hijack network requests made by an admin user (who, by design, is allowed to change the code that is running on the server).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Prestashop/Prestashop3 versions
    cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*range: <=8.1.7
    • (no CPE)
    • (no CPE)range: <=8.1.7
  • osv-coords
    pkg:bitnami/prestashop
    Range: < 9.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.