An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields. Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16194 Reference (s):
- https://github.com/login-securite/CVE/blob/main/CVE-2020-16194.md