UpHeron
All vulnerabilities

Servers and applications

CVE-2019-13461

In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability due to a guessable value sent to the web application during checkout. An attacker could leak personal customer information. This is PrestaShop bug #14444.

Severity
High 7.5
Published
9 Jul 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.7% in the next 30 daysHigher than 77% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
PrestaShopServers and applications · cpe:a:prestashop:prestashop
  • Every version up to 1.7.5.2
  • Version 1.7.6.0-beta1
  • Version 1.7.6.0-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-13461
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-13461