CVE-2018-5682 Information disclosure in n/a

What is CVE-2018-5682?

CVE-2018-5682 is a medium-severity vulnerability in Prestashop Prestashop, published on 13 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.

Weakness: CWE-200

Which versions are affected by CVE-2018-5682?

It affects 1 product.

Products include Prestashop Prestashop.

How do I fix CVE-2018-5682?

No fix has been published for CVE-2018-5682 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-5682 being exploited?

There is no known exploitation of CVE-2018-5682 in the wild and no public exploit code.

Other vulnerabilities in Prestashop Prestashop

• CVE-2023-30839 PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager" Critical 10.0
• CVE-2008-5791 Other in n/a Critical 10.0
• CVE-2024-41651 Server-side request forgery in n/a Critical 9.8
• CVE-2022-31181 Remote code execution in prestashop Critical 9.8
• CVE-2021-3110 SQL injection in n/a Critical 9.8

All Prestashop Prestashop vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3g87-jvpr-fg65.