Back

CVE-2024-33274

April 30, 2024, 5:52 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

FME Modules customfields

  • 2.2.7
  • before 2.2.7

FME Modules customfields

  • 2.2.7 and before

Source

cve@mitre.org

Tags

CVE-2024-33274 details

Published : April 30, 2024, 3:15 p.m.
Last Modified : April 30, 2024, 5:52 p.m.

Description

Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information via the Custom Checkout Fields, Add Custom Fields to Checkout parameter of the ajax.php

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://addons.prestashop.com/en/registration-ordering-process/19008-custom-checkout-fields-add-custom-fields-to-checkout.html cve@mitre.org
https://security.friendsofpresta.org/modules/2024/04/29/customfields.html cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.