CVE-2020-5250: 
Prestashop vulnerability analysis and mitigation

A critical vulnerability (CVE-2020-5250) was discovered in PrestaShop versions greater than 1.7.0.0, affecting the customer information management system. The vulnerability was disclosed on March 5, 2020, and was patched in version 1.7.6.4. The issue allowed customers to manipulate form parameters related to address and customer information (GitHub Advisory).

The vulnerability existed in PrestaShop's form handling mechanism where customers could modify the 'id_address' parameter when editing their address and the 'id_customer' field in the CustomerForm. This security flaw allowed manipulation of form parameters that should have been protected, potentially exposing sensitive customer data (GitHub Advisory).

The vulnerability allowed malicious users to access and potentially modify other customers' address information and account details. By manipulating the form parameters, attackers could steal address information and modify account information of other users in the system (GitHub Advisory).

The vulnerability was patched in PrestaShop version 1.7.6.4. No workarounds were available for this issue, and users were required to update to the patched version to protect against this vulnerability. The fix involved removing the ability to manipulate sensitive form parameters (GitHub Advisory).