Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
PrestaShop: Malicious files can be accessed on your server
published 2 years ago
Summary
PrestaShop's back office was vulnerable to a security risk that allowed attackers to access and potentially harm files on your server. This has been fixed in version 8.1.1. If you're using an earlier version, update to 8.1.1 as soon as possible to protect your server.
What to do
- Update prestashop to version 8.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Bitnami | – | prestashop |
< 8.1.1 Fix: upgrade to 8.1.1
|
Original advisory text
PrestaShop vulnerable to path traversal
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Timeline
Published6 Mar 2024
Updated16 Jul 2026
First seen16 Jul 2026
Sources
Track software like this
Free during beta