N/A - CVE-2024-28390

Executive Summary

Informations
Name	CVE-2024-28390	First vendor Publication	2024-03-14
Vendor	Cve	Last vendor Modification	2025-06-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score	N/A	Attack Range	N/A
Cvss Impact Score	N/A	Attack Complexity	N/A
Cvss Expoit Score	N/A	Authentication	N/A
Calculate full CVSS 2.0 Vectors scores

Detail

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28390

CPE : Common Platform Enumeration

Type	Description	Count
Application	Advancedplugins Image Toolbox cpe:2.3:a:advancedplugins:image_toolbox:_webp_compress,_regenerate_&_more_prestashop_module::::::prestashop::*	1

Sources (Detail)

https://security.friendsofpresta.org/modules/2024/03/12/ultimateimagetool.html

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2025-06-10 21:20:58	Multiple Updates
2024-11-25 09:26:30	Multiple Updates
2024-08-23 00:28:08	Multiple Updates
2024-03-15 02:43:14	Multiple Updates
2024-03-15 02:43:13	Multiple Updates
2024-03-14 17:27:23	Multiple Updates
2024-03-14 09:27:25	First insertion