https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 20:37:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-5560 EUVD-2026-5560 https://cve.radiocsirt.org/vuln/euvd-2026-5560 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34717 <p>PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url. This issue is patched in version 8.1.6. No known workarounds are available.</p> <p>PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url. This issue is patched in version 8.1.6. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-34717 https://cve.radiocsirt.org/vuln/ghsa-7pjr-2rgh-fc5g <p><strong>Affected:</strong> Packagist: prestashop/prestashop</p> <p>### Impact Since PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url.</p> <p>### Patches Patched in 8.1.6</p> <p>### Workarounds Upgrade to 8.1.6</p> <p>Thank you to Samuel Bodevin, who found this vulnerability and shared it with the PrestaShop team.</p> <p><strong>Affected:</strong> Packagist: prestashop/prestashop</p> <p>### Impact Since PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url.</p> <p>### Patches Patched in 8.1.6</p> <p>### Workarounds Upgrade to 8.1.6</p> <p>Thank you to Samuel Bodevin, who found this vulnerability and shared it with the PrestaShop team.</p> https://cve.radiocsirt.org/vuln/ghsa-7pjr-2rgh-fc5g