MEDIUM 6.7
GHSA-2rf5-3fw8-qm47
PrestaShop file deletion via attachment API
Details
### Impact It is possible to delete a file from the server by using the Attachments controller and the Attachments API.
### Patches 8.1.1
### Found by Kto94 (via Yeswehack)
### Workarounds none
### References none
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist / prestashop/prestashop
Introduced in:
0 Fixed in: 8.1.1 Fix
composer require prestashop/prestashop:^8.1.1