Most recent entries from all

EUVD-2026-267676

fkie_cve-2026-25597

PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3.

GHSA-67v7-3g49-mxh2 — PrestaShop affected by time based enumeration in FO login form

Affected: Packagist: prestashop/prestashop

### Impact A time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times.

### Patches 8.2.4 and 9.0.3

### Workarounds none

### References Found by Lam Yiu Tung