CVE-2024-34717

PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mode, by supplying a random secure_key parameter in the url. This issue is patched in version 8.1.6. No known workarounds are available.

• CWE-200

• https://github.com/PrestaShop/PrestaShop/releases/tag/8.1.6Release Notes
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-7pjr-2rgh-fc5gVendor Advisory
• https://github.com/PrestaShop/PrestaShop/releases/tag/8.1.6Release Notes
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-7pjr-2rgh-fc5gVendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34711GeoServer is an open source server that allows users to shar…8.2
• CVE-2024-34712Oceanic is a NodeJS library for interfacing with Discord. Pr…6.5
• CVE-2024-34713sshproxy is used on a gateway to transparently proxy a user …3.5
• CVE-2024-34714The Hoppscotch Browser Extension is a browser extension for …7.6
• CVE-2024-34715Fides is an open-source privacy engineering platform. The Fi…3.3
• CVE-2024-34716PrestaShop is an open source e-commerce web application. A c…6.1
• CVE-2024-34719In multiple locations, there is a possible permissions bypas…7.8
• CVE-2024-3472The Modal Window WordPress plugin before 5.3.10 does not ha…5.9
• CVE-2024-34720In com_android_internal_os_ZygoteCommandBuffer_nativeForkRep…7.8
• CVE-2024-34721In ensureFileColumns of MediaProvider.java, there is a possi…5.5
• CVE-2024-34722In smp_proc_rand of smp_act.cc, there is a possible authenti…8.8
• CVE-2024-34723In onTransact of ParcelableListBinder.java , there is a poss…7.8