Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-51586

Good to know:

icon

Date: September 7, 2025

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

Severity Score

Related Resources (11)

https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8xx5-h6m3-jr33
https://nvd.nist.gov/vuln/detail/CVE-2025-51586
https://github.com/PrestaShop/PrestaShop
https://build.prestashop-project.org/news/2025/prestashop-8-2-3-security-release
https://github.com/PrestaShop/PrestaShop/commit/c97bdf10f77fedbe5a61a1dec5f96b3abb1d76fb
https://prestashop.com/
https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.3
https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md
https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.1
https://prestashop.com
https://www.mend.io/vulnerability-database/CVE-2025-51586

Severity Score

Weakness Type (CWE)

Observable Discrepancy

CWE-203

Exposure of Private Personal Information to an Unauthorized Actor

CWE-359

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/PrestaShop/PrestaShop.git - 8.2.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us