CVE-2020-15081 — Information exposure in the upload directory in PrestaShop
In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is t…
Published: 2020-07-02 · CVSS: 5.3 · CVSS 3.1
In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7