2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Prestashop","vendor":"Prestashop","versions":[{"status":"affected","version":"8.1.7"}]}],"source":"cve-coordination@incibe.es"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Stored Cross-Site Scripting (XSS) vulnerability in Prestashop 8.1.7, due to the lack of proper validation of user input through ‘/<admin_directory>/index.php’, affecting the ‘link’ parameter. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details."},{"lang":"es","value":"Vulnerabilidad Cross-Site Scripting (XSS) Almacenado en Prestashop 8.1.7, debido a la falta de validación adecuada de la entrada del usuario a través de ‘//index.php’, que afecta al parámetro ‘link’. Esta vulnerabilidad podría permitir que un usuario remoto envíe una consulta manipulado especial a un usuario autenticado y robe los detalles de su sesión de cookies."}],"id":"CVE-2025-1230","lastModified":"2026-06-17T08:38:38.960","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.7,"impactScore":2.7,"source":"cve-coordination@incibe.es","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1230","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-12T14:56:07.683783Z","version":"2.0.3"}}]},"published":"2025-02-12T11:15:11.230","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-prestashop"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"cve-coordination@incibe.es","type":"Secondary"}]}
|