{"affected":[{"conditional":false,"product":"prestashop","source":"NVD","vendor":"prestashop","versions":[{"lessThan":"8.2.1","status":"affected","version":"*","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.1","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2025-51586","cwes":["CWE-359"],"description":"An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":3.7,"severity":"low","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1794075000200,"publishedAt":1757351733830,"references":[{"source":"cve@mitre.org","tags":["Release Notes"],"url":"https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.1"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md"},{"source":"cve@mitre.org","tags":["Product"],"url":"https://prestashop.com/"}],"remediation":[],"revision":"d80514a769542ed0b15366d678065c89f76276232d94cb8cdeb2be2e201b5955","sources":[{"modifiedAt":1794075000200,"name":"NVD","retrievedAt":1794075408880,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-51586"}],"ssvc":{"assessedAt":1757353646728,"automatable":"no","exploitation":"poc","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2025-51586","updatedAt":1794075408880}