CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

Score

CVSS 3.1 3.7 Low

Status

Analyzed - cve@mitre.org

Published

2025-09-08

Last modified

2025-09-08

Weaknesses

CWE-359

Affected products

• Prestashop (Prestashop)

References

• https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.1
• https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md
• https://prestashop.com/