exploitDog

GHSA-wj7r-p6pm-xx2r

Опубликовано: 17 июн. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 7.2

Описание

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

Ссылки

EPSS

Процентиль: 36%

0.00155

Низкий

7.2 High

CVSS3

CVE ID

Дефекты

CWE-1336

CWE-97

Связанные уязвимости

CVE-2024-37621

CVSS3: 7.2

nvd

больше 1 года назад

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

EPSS

Процентиль: 36%

0.00155

Низкий

7.2 High

CVSS3

CVE ID

Дефекты

CWE-1336

CWE-97