CVE-2020-16194

MEDIUM

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploit...

Affects 1 product across 1 vendor.

CVSS 3.15.3
EPSS1.2%
Percentile68th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-639: Authorization Bypass Through User-Controlled Key (IDOR)

Software uses a user-supplied key to access resources without verifying authorization for that specific resource.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2021. A medium severity vulnerability affects Store-Opart systems (CVE-2020-16194). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2021-GLOBAL-082080-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2020-16194?
This vulnerability was disclosed in 2021. A medium severity vulnerability affects Store-Opart systems (CVE-2020-16194). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2020-16194?
CVE-2020-16194 has CVSS 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS: 1.2%.
Is CVE-2020-16194 actively exploited?
No confirmed active exploitation of CVE-2020-16194 as of 2026-05-30.
How do I remediate CVE-2020-16194?
Priority: MONITOR.
What systems are affected by CVE-2020-16194?
CVE-2020-16194 affects Store-Opart Op'Art Devis.
Vulnerability Details
CVE IDCVE-2020-16194
BSIDBS-2021-GLOBAL-082080-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published2021-02-04
Last Modified2026-01-27
ICS Relevance0%
Weakness (CWE)
Authorization Bypass Through User-Controlled Key (IDOR)
SourceNVD
Official Description

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Store-Opart Op'Art Devis < 4.0.2
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2079 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash2c07602e26a0078b2751c7b911a1bb4f0bf3a0e0a8152ea5019f07c88295c47d8fe0301426cb753a6681778fa5a87dacda00c833ca52dcf1862425dac428e96f
Related CVEs affecting Store-Opart
CVE-2023-48188 9.8 SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 a... CVE-2023-50061 9.8 PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL I...
View all Store-Opart CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →