CVE-2020-15082: 
Prestashop vulnerability analysis and mitigation

The vulnerability (CVE-2020-15082) affects PrestaShop versions from 1.6.0.1 and before version 1.7.6.6. The dashboard functionality allows unauthorized rewriting of all configuration variables, posing a significant security risk (GitHub Advisory, CISA).

The vulnerability is classified with a CVSS score of 7.5, indicating high severity. It is categorized under CWE-15 (External Control of System or Configuration Setting), which relates to improper control over system configurations. The issue stems from insufficient validation in the dashboard controller, allowing manipulation of configuration variables (GitHub Advisory).

The vulnerability allows attackers to rewrite all configuration variables through the dashboard interface. This could potentially lead to unauthorized access and manipulation of critical system settings, compromising the security and functionality of the PrestaShop installation (CISA).

The vulnerability can be exploited through the dashboard interface, requiring access to the system's configuration settings. The attack vector is considered relatively straightforward, as it involves direct manipulation of configuration variables (GitHub Advisory).

The vulnerability has been patched in PrestaShop version 1.7.6.6. Users are strongly advised to upgrade to this version or later to protect against this security risk. The fix includes proper validation of dashboard configuration changes (GitHub Advisory).