MEDIUM6.5
GHSA-v4gr-v679-42p7
PrestaShop file deletion via CustomerMessage
Quick fix
GHSA-v4gr-v679-42p7 — prestashop/prestashop: upgrade to the fixed version with the command below.
composer require prestashop/prestashop:^8.1.1Details
### Impact It is possible to delete files from the server via the CustomerMessage API
### Patches 8.1.1
### Found by Kto94 (via Yeswehack)
### Workarounds none
### References none
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/prestashop/prestashop
Introduced in:
0Fixed in: 8.1.1Fix
composer require prestashop/prestashop:^8.1.1