cve.bz

CVE-2022-46158

4.3 mediumEPSS 0.5%

Medium (4.3) in prestashop prestashop. EPSS 0.5% chance of exploitation in the next 30 days.

PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to upgrade to version 1.7.8.8. There are no known workarounds for this issue.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs
CWE-862, CWE-200
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON