CVE-2018-19125 - PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory

HIGH

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory

Published Nov 9, 2018

7.5

HIGH

CVSS 3.0

EPSS 10.76%

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/PrestaShop/PrestaShop/pull/11285		x_refsource_MISCPatchThird Party Advisory
https://github.com/PrestaShop/PrestaShop/pull/11286		x_refsource_MISCPatchThird Party Advisory
https://www.exploit-db.com/exploits/45964/		exploitx_refsource_EXPLOIT-DBThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 9, 2018

Updated Aug 5, 2024

Reserved Nov 9, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a