| Package | Affected versions | Patched versions |
|---|---|---|
| m4 pdf | ≤ 3.2.3 |
M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability. The “f” parameter is not properly checked in the resource /m4pdf/pdf.php, returning any file given its relative path. An attacker that exploits this vulnerability could download /etc/passwd from the server if the file exists.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free