Prestashop path traversal vulnerability (CNVD-2023-41497)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. Prestashop 1.7.20 and previous versions of the existence of path traversal vulnerability , the vulnerability stems from odules/customexporter/downloads/download.php lack of permissions control and pathname construction control , an attacker can use the vulnerability through the path traversal to view the information system of all the files .