Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9x68-tvm3-5ye1
Summary
Improper Control of Generation of Code ('Code Injection')
In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher privileges. The attacker can then inject arbitrary PHP objects into the process and abuse an object chain in order to gain Remote Code Execution. This occurs because protection against serialized objects looks for a 0: followed by an integer, but does not consider 0:+ followed by an integer.
Aliases
0
alias CVE-2018-20717
1
alias GHSA-xx67-2j3v-h76p
Fixed_packages
0
url pkg:composer/prestashop/prestashop@1.7.2.5
purl pkg:composer/prestashop/prestashop@1.7.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-c4g5-t8vx-syax
8
vulnerability VCID-cf1h-m5xj-mfc5
9
vulnerability VCID-ey36-u4qn-gbge
10
vulnerability VCID-f4m9-pgg8-nqa3
11
vulnerability VCID-f7s4-16b7-zkcm
12
vulnerability VCID-fkcb-5u24-wqbg
13
vulnerability VCID-gggb-dges-qke1
14
vulnerability VCID-ghu1-c6e6-pudm
15
vulnerability VCID-htkt-tj6d-hydx
16
vulnerability VCID-keyj-v83x-nkck
17
vulnerability VCID-kwe1-5ukw-cbau
18
vulnerability VCID-mb3x-p2d7-gqdx
19
vulnerability VCID-qx7c-y2p8-vye9
20
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.5
Affected_packages
0
url pkg:composer/prestashop/prestashop@1.7.0.0
purl pkg:composer/prestashop/prestashop@1.7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0
1
url pkg:composer/prestashop/prestashop@1.7.0.0-beta.1.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-beta.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-beta.1.0
2
url pkg:composer/prestashop/prestashop@1.7.0.0-beta.2.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-beta.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-beta.2.0
3
url pkg:composer/prestashop/prestashop@1.7.0.0-beta.3.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-beta.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-beta.3.0
4
url pkg:composer/prestashop/prestashop@1.7.0.0-beta.4.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-beta.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-beta.4.0
5
url pkg:composer/prestashop/prestashop@1.7.0.0-rc.0.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-rc.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-rc.0.0
6
url pkg:composer/prestashop/prestashop@1.7.0.0-rc.1.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-rc.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-rc.1.0
7
url pkg:composer/prestashop/prestashop@1.7.0.0-rc.2.0
purl pkg:composer/prestashop/prestashop@1.7.0.0-rc.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.0-rc.2.0
8
url pkg:composer/prestashop/prestashop@1.7.0.1
purl pkg:composer/prestashop/prestashop@1.7.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.1
9
url pkg:composer/prestashop/prestashop@1.7.0.2
purl pkg:composer/prestashop/prestashop@1.7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.2
10
url pkg:composer/prestashop/prestashop@1.7.0.3
purl pkg:composer/prestashop/prestashop@1.7.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.3
11
url pkg:composer/prestashop/prestashop@1.7.0.4
purl pkg:composer/prestashop/prestashop@1.7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.4
12
url pkg:composer/prestashop/prestashop@1.7.0.5
purl pkg:composer/prestashop/prestashop@1.7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.5
13
url pkg:composer/prestashop/prestashop@1.7.0.6
purl pkg:composer/prestashop/prestashop@1.7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.0.6
14
url pkg:composer/prestashop/prestashop@1.7.1.0
purl pkg:composer/prestashop/prestashop@1.7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.1.0
15
url pkg:composer/prestashop/prestashop@1.7.1.1
purl pkg:composer/prestashop/prestashop@1.7.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.1.1
16
url pkg:composer/prestashop/prestashop@1.7.1.2
purl pkg:composer/prestashop/prestashop@1.7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.1.2
17
url pkg:composer/prestashop/prestashop@1.7.2.0
purl pkg:composer/prestashop/prestashop@1.7.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.0
18
url pkg:composer/prestashop/prestashop@1.7.2.0-rc.1.0
purl pkg:composer/prestashop/prestashop@1.7.2.0-rc.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.0-rc.1.0
19
url pkg:composer/prestashop/prestashop@1.7.2.1
purl pkg:composer/prestashop/prestashop@1.7.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.1
20
url pkg:composer/prestashop/prestashop@1.7.2.2
purl pkg:composer/prestashop/prestashop@1.7.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.2
21
url pkg:composer/prestashop/prestashop@1.7.2.3
purl pkg:composer/prestashop/prestashop@1.7.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.3
22
url pkg:composer/prestashop/prestashop@1.7.2.4
purl pkg:composer/prestashop/prestashop@1.7.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1trs-ajxn-jkhk
1
vulnerability VCID-22v3-9qr1-pyfg
2
vulnerability VCID-2kkx-8ucb-7ucj
3
vulnerability VCID-45hk-m7uv-zqfe
4
vulnerability VCID-7wj5-37ma-hbhg
5
vulnerability VCID-8beq-8rca-mbhd
6
vulnerability VCID-9n6p-8b89-63c6
7
vulnerability VCID-9x68-tvm3-5ye1
8
vulnerability VCID-c4g5-t8vx-syax
9
vulnerability VCID-cf1h-m5xj-mfc5
10
vulnerability VCID-ey36-u4qn-gbge
11
vulnerability VCID-f4m9-pgg8-nqa3
12
vulnerability VCID-f7s4-16b7-zkcm
13
vulnerability VCID-fkcb-5u24-wqbg
14
vulnerability VCID-gggb-dges-qke1
15
vulnerability VCID-ghu1-c6e6-pudm
16
vulnerability VCID-htkt-tj6d-hydx
17
vulnerability VCID-keyj-v83x-nkck
18
vulnerability VCID-kwe1-5ukw-cbau
19
vulnerability VCID-mb3x-p2d7-gqdx
20
vulnerability VCID-qx7c-y2p8-vye9
21
vulnerability VCID-vcuy-9cdj-uyhz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.2.4
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-20717
reference_id
reference_type
scores
0
value 0.02992
scoring_system epss
scoring_elements 0.86544
published_at 2026-04-09T12:55:00Z
1
value 0.02992
scoring_system epss
scoring_elements 0.86569
published_at 2026-04-18T12:55:00Z
2
value 0.02992
scoring_system epss
scoring_elements 0.86563
published_at 2026-04-16T12:55:00Z
3
value 0.02992
scoring_system epss
scoring_elements 0.86549
published_at 2026-04-13T12:55:00Z
4
value 0.02992
scoring_system epss
scoring_elements 0.86556
published_at 2026-04-12T12:55:00Z
5
value 0.02992
scoring_system epss
scoring_elements 0.86497
published_at 2026-04-02T12:55:00Z
6
value 0.02992
scoring_system epss
scoring_elements 0.86515
published_at 2026-04-07T12:55:00Z
7
value 0.02992
scoring_system epss
scoring_elements 0.86535
published_at 2026-04-08T12:55:00Z
8
value 0.02992
scoring_system epss
scoring_elements 0.86559
published_at 2026-04-11T12:55:00Z
9
value 0.02992
scoring_system epss
scoring_elements 0.86486
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-20717
1
reference_url https://blog.ripstech.com/2018/prestashop-remote-code-execution
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://blog.ripstech.com/2018/prestashop-remote-code-execution
2
reference_url https://blog.ripstech.com/2018/prestashop-remote-code-execution/
reference_id
reference_type
scores
url https://blog.ripstech.com/2018/prestashop-remote-code-execution/
3
reference_url https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release
4
reference_url https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release/
reference_id
reference_type
scores
url https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release/
5
reference_url https://github.com/PrestaShop/PrestaShop
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/PrestaShop/PrestaShop
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-20717
reference_id CVE-2018-20717
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-20717
8
reference_url https://github.com/advisories/GHSA-xx67-2j3v-h76p
reference_id GHSA-xx67-2j3v-h76p
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xx67-2j3v-h76p
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Exploits
Severity_range_score6.5 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9x68-tvm3-5ye1