CVE-2023-26865

CRITICO 9.8CVE-2023-26865 · Published 24/04/2023 · updated 17/06/2026

In breve

CVE-2023-26865 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda bdroppy (brandsdistribution).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.3% delle vulnerabilità.
Correzione: aggiornare a 2.2.28 o successiva.

Package	Affected versions	Patched versions
bdroppy brandsdistribution	`< 2.2.28`	`2.2.28`

Description

SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCronModuleFrontController::importProducts component.

References

bdroppy.com/dropshipping-apps-integrations-bdroppy · Product
friends-of-presta.github.io/security-advisories/modules/2023/04/20/bdroppy.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free