Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS03djJ2LTlybTQtN204Zs4AAy1O

Improper Control of Generation of Code in Twig rendered views

Impact

We fixed with CVE-2023-22731 Twig filters to only be executed with allowed functions. It is possible to pass PHP Closures as string or an array and array crafted PHP Closures was not checked against allow list

Patches

The problem has been fixed with 6.4.20.1 with an improved override.

Workarounds

For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

References

https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023?category=security-updates

Permalink: https://github.com/advisories/GHSA-7v2v-9rm4-7m8f
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03djJ2LTlybTQtN204Zs4AAy1O
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 1 year ago
Updated: over 1 year ago

CVSS Score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-7v2v-9rm4-7m8f, CVE-2023-2017
References:

• https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8f
• https://nvd.nist.gov/vuln/detail/CVE-2023-2017
• https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023
• https://github.com/shopware/platform/releases/tag/v6.4.20.1
• https://starlabs.sg/advisories/23/23-2017/
• https://github.com/advisories/GHSA-7v2v-9rm4-7m8f

Repository: https://github.com/shopware/platform
Blast Radius: 21.8

Affected Packages