cve.bz

CVE-2020-15081

5.3 mediumEPSS 1.6%

Medium (5.3) in prestashop prestashop. EPSS 1.6% chance of exploitation in the next 30 days.

In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWEs
CWE-200, CWE-548
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON