CVE-2023-47110: 
PHP vulnerability analysis and mitigation

The blockreassurance module for PrestaShop, which adds an information block aimed at offering helpful information to reassure customers about store trustworthiness, contains a critical vulnerability. The vulnerability was discovered and disclosed on November 9, 2023, affecting versions up to and including 5.1.3. The issue allows modification of any value in the configuration table through an ajax function (GitHub Advisory).

The vulnerability has been assigned CVE-2023-47110 with a CVSS v3.1 base score of 9.1 (Critical). The vulnerability is characterized by the following attack vectors: Network-based attack vector, Low attack complexity, Low privileges required, No user interaction needed, Changed scope, and impacts on Confidentiality (Low), Integrity (Low), and Availability (High) (GitHub Advisory).

The vulnerability allows an employee with access to the block reassurance module to modify any value in the configuration table. This could potentially lead to unauthorized changes in the system's configuration, affecting the integrity and availability of the service (GitHub Advisory).

The vulnerability has been patched in version 5.1.4 of the blockreassurance module. No workarounds are available, so upgrading to the patched version is the only solution (GitHub Advisory).