CVE-2025-51586
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PrestaShop是美国PrestaShop公司的一套开源的电子商务解决方案。该方案提供多种支付方式、短消息提醒和商品图片缩放等功能。 PrestaShop 8.2.1之前版本存在安全漏洞，该漏洞源于重置密码功能可能导致敏感信息泄露。
Public Exploits 1
Nuclei · 1
CVE-2025-51586.yaml [template]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-51586
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PrestaShop 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PrestaShop是美国PrestaShop公司的一套开源的电子商务解决方案。该方案提供多种支付方式、短消息提醒和商品图片缩放等功能。 PrestaShop 8.2.1之前版本存在安全漏洞，该漏洞源于重置密码功能可能导致敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-51586
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | PrestaShop AdminLogin Email Enumeration PoC - CVE-2025-51586. This repository provides an ethical Proof-of-Concept (PoC) for the PrestaShop vulnerability allowing user enumeration through the AdminLogin password reset mechanism. It explains the impact, setup, and usage of the PoC script. | https://github.com/7h30th3r0n3/CVE-2025-51586-PrestaShop-PoC | POC Details |
| 2 | User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote attackers to obtain administrators user email addresses via manipulation of the id_employee and reset_token parameters. An attacker who has access to the Back Office login URL can trigger the password reset form to disclose the associated email address in a hidden field, even when the provided reset token is invalid. This issue has been fixed in 8.2.3. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51586.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-51586
请登录查看更多情报信息。
Security Blog Posts for CVE-2025-51586 (1)
Same Patch Batch · n/a · 2025-09-08 · 15 CVEs total
| CVE-2025-10110 | 6.3 MEDIUM | ChanCMS search sql injection |
| CVE-2025-22956 | uib OPSI 安全漏洞 | |
| CVE-2025-55998 | Mezereon Smart Search & Filter Shopify 安全漏洞 | |
| CVE-2025-56630 | FoxCMS 安全漏洞 | |
| CVE-2025-57141 | rsbi-os 安全漏洞 | |
| CVE-2025-52161 | Scholl Communications AG Weblication CMS Core 安全漏洞 | |
| CVE-2025-56267 | Avigilon ACM 安全漏洞 | |
| CVE-2025-56266 | Avigilon ACM 安全漏洞 | |
| CVE-2025-56265 | n8n 安全漏洞 | |
| CVE-2025-57285 | CodeceptJS 安全漏洞 | |
| CVE-2025-55849 | Weiphp WeiPHP 安全漏洞 | |
| CVE-2024-48341 | dingfanzu 安全漏洞 | |
| CVE-2025-52389 | Envasadora H2O Soda Cristal 安全漏洞 | |
| CVE-2025-52288 | Open5GS 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-51586
No comments yet