« Volver al listado

CVE-2024-2759

Estado: AplazadaAlta (7.5)—

Una vulnerabilidad de control de acceso inadecuado en el complemento Apaczka para PrestaShop permite la recopilación de información de plantillas guardadas sin autenticación. Este problema afecta al complemento Apaczka para PrestaShop desde la v1 hasta la v4.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Apaczka — ApaczkaAIPrestashop — PrestashopAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-2759",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-2759",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-20T17:19:10.975327Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cvd@cert.pl",
      "affectedData": [
        {
          "vendor": "Alsendo Sp. z o. o.",
          "product": "Apaczka",
          "versions": [
            {
              "status": "affected",
              "version": "v1",
              "versionType": "custom",
              "lessThanOrEqual": "v4"
            }
          ],
          "platforms": [
            "PrestaShop"
          ],
          "collectionURL": "https://www.apaczka.pl/integracje/prestashop/konfiguracja/",
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:prestashopmodules:apaczka:*:*:*:*:*:*:*:*"
          ],
          "vendor": "prestashopmodules",
          "product": "apaczka",
          "versions": [
            {
              "status": "affected",
              "version": "1.0",
              "versionType": "custom",
              "lessThanOrEqual": "4.0"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-04T14:15:10.220",
  "references": [
    {
      "url": "https://cert.pl/en/posts/2024/04/CVE-2024-2759/",
      "source": "cvd@cert.pl"
    },
    {
      "url": "https://cert.pl/posts/2024/04/CVE-2024-2759/",
      "source": "cvd@cert.pl"
    },
    {
      "url": "https://cert.pl/en/posts/2024/04/CVE-2024-2759/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert.pl/posts/2024/04/CVE-2024-2759/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cvd@cert.pl",
      "description": [
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authentication.This issue affects Apaczka plugin for PrestaShop from v1 through v4."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de control de acceso inadecuado en el complemento Apaczka para PrestaShop permite la recopilación de información de plantillas guardadas sin autenticación. Este problema afecta al complemento Apaczka para PrestaShop desde la v1 hasta la v4."
    }
  ],
  "lastModified": "2026-06-17T07:25:29.373",
  "sourceIdentifier": "cvd@cert.pl"
}