MEDIUM4.3
GHSA-6jmf-2pfc-q9m7
PrestaShop allows users to uninstall modules from backoffice, even with low rights
Quick fix
GHSA-6jmf-2pfc-q9m7 — prestashop/prestashop: upgrade to the fixed version with the command below.
composer require prestashop/prestashop:^8.1.2Details
### Impact Any module can be disabled or uninstalled from back office, even with low user right.
### Patches 8.1.2
### Workarounds none
### References
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/prestashop/prestashop
Introduced in:
0Fixed in: 8.1.2Fix
composer require prestashop/prestashop:^8.1.2