CVE-2020-16194

2021-02-0414:39:14

mitre

www.cve.org

prestashop

opart devis

idor

vulnerability

unauthenticated attackers

invoice address

delivery address

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user’s invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields.

References

github.com/login-securite/CVE/blob/main/CVE-2020-16194.md