MEDIUM 6.5
GHSA-v4gr-v679-42p7
PrestaShop file deletion via CustomerMessage
Details
### Impact It is possible to delete files from the server via the CustomerMessage API
### Patches 8.1.1
### Found by Kto94 (via Yeswehack)
### Workarounds none
### References none
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist / prestashop/prestashop
Introduced in:
0 Fixed in: 8.1.1 Fix
composer require prestashop/prestashop:^8.1.1