CVE-2024-36684
CVE-2024-36684: SQL Injection Vulnerability in PrestaShop Custom Links Module. A critical vulnerability exists in the 'Custom links' module (versions 2.3 and below) by Promokit.eu for PrestaShop, allowing unauthenticated guests to execute SQL injection attacks. The vulnerability lies within the ajax.php script, where a susceptible SQL call can be triggered via a simple HTTP request. While the CVSS score is high at 9.8, SOCRadar's SVRS gives this vulnerability a score of 34. This suggests that while the technical exploit is severe, the vulnerability may not be actively exploited, or is of low severity. Exploiting this vulnerability could lead to unauthorized database access, data breaches, and complete compromise of the PrestaShop store. It is crucial to apply the patch immediately despite the low SVRS score to prevent potential security incidents.
Description:
CVE-2024-36684 is a SQL injection vulnerability in the "Custom links" module (pk_customlinks) version 2.3 or earlier for PrestaShop. This vulnerability allows a guest user to execute arbitrary SQL queries on the vulnerable system.
Key Insights:
- SVRS Score: 34 (Moderate)
- Exploit Status: Active exploits have been published.
- CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
- In the Wild: The vulnerability is actively exploited by hackers.
Mitigation Strategies:
- Update the "Custom links" module to version 2.4 or later.
- Implement input validation and sanitization to prevent SQL injection attacks.
- Use a web application firewall (WAF) to block malicious requests.
- Monitor logs for suspicious activity and take appropriate action.
Additional Information:
If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.