https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 16:25:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-218893 EUVD-2026-218893 https://cve.radiocsirt.org/vuln/euvd-2026-218893 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25170 <p>PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation. The problem is fixed in version 8.0.1.</p> <p>PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation. The problem is fixed in version 8.0.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25170 https://cve.radiocsirt.org/vuln/ghsa-3g43-x7qr-96ph <p><strong>Affected:</strong> Packagist: prestashop/prestashop</p> <p>### Impact When authenticating users PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enables `same-site attackers` to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation.</p> <p>### Patches The problem is fixed in version 8.0.1</p> <p><strong>Affected:</strong> Packagist: prestashop/prestashop</p> <p>### Impact When authenticating users PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enables `same-site attackers` to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation.</p> <p>### Patches The problem is fixed in version 8.0.1</p> https://cve.radiocsirt.org/vuln/ghsa-3g43-x7qr-96ph https://cve.radiocsirt.org/vuln/gsd-2023-25170 gsd-2023-25170 https://cve.radiocsirt.org/vuln/gsd-2023-25170