| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop/prestashop | ≥ 9.0.0-alpha.1, < 9.0.3< 8.2.4 | 9.0.38.2.4 |
| prestashop | ≥ 9.0.0, < 9.0.3< 8.2.4 | 9.0.38.2.4 |
A time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times.
8.2.4 and 9.0.3
none
Found by Lam Yiu Tung
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free