Junglewise Threat Intelligence

CVE-2023-22731: Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views

CVE-2023-22731 · Severity: low · CVSS 3.1 · Published 2023-01-17

Technologies: shopware/core (Packagist), shopware/platform (Packagist). Vendors: Packagist.

Executive brief

Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views

Affected products

  • Packagist shopware/core
  • Packagist shopware/platform

Related threats