Junglewise Threat Intelligence

CVE-2023-2017: Shopware Has Improper Control of Generation of Code in Twig rendered views

CVE-2023-2017 · Severity: low · CVSS 3.1 · Published 2023-04-18

Technologies: shopware/core (Packagist), shopware/platform (Packagist). Vendors: Packagist.

Executive brief

Shopware Has Improper Control of Generation of Code in Twig rendered views

Affected products

  • Packagist shopware/core
  • Packagist shopware/platform

Related threats