MEDIUM6.7
GHSA-2rf5-3fw8-qm47
PrestaShop file deletion via attachment API
Quick fix
GHSA-2rf5-3fw8-qm47 — prestashop/prestashop: upgrade to the fixed version with the command below.
composer require prestashop/prestashop:^8.1.1Details
### Impact It is possible to delete a file from the server by using the Attachments controller and the Attachments API.
### Patches 8.1.1
### Found by Kto94 (via Yeswehack)
### Workarounds none
### References none
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/prestashop/prestashop
Introduced in:
0Fixed in: 8.1.1Fix
composer require prestashop/prestashop:^8.1.1