CVE-2023-25170

PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation. The problem is fixed in version 8.0.1.

• CWE-352

• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3g43-x7qr-96phVendor Advisory
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3g43-x7qr-96phVendor Advisory

Published

Mar 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25165Helm is a tool that streamlines installing and managing Kube…4.3
• CVE-2023-25166formula is a math and string formula parser. In versions pri…6.5
• CVE-2023-25167Discourse is an open source discussion platform. In affected…5.7
• CVE-2023-25168Wings is Pterodactyl's server control plane. This vulnerabil…8.2
• CVE-2023-25169discourse-yearly-review is a discourse plugin which publishe…5.3
• CVE-2023-2517The Metform Elementor Contact Form Builder plugin for WordPr…4.3
• CVE-2023-25171Kiwi TCMS, an open source test management system, does not i…5.9
• CVE-2023-25172Discourse is an open-source discussion platform. Prior to ve…5.4
• CVE-2023-25173containerd is an open source container runtime. A bug was fo…7.8
• CVE-2023-25174Improper access control in some Intel(R) Chipset Driver Soft…7.8
• CVE-2023-25175Improper input validation in some Intel(R) Server Board BMC …5.5
• CVE-2023-25176in OpenHarmony v3.2.4 and prior versions allow a local attac…5.5