CVE-2023-2017
highPriorität · verfolgen · 36EPSS 0.021 · 81. PerzentilEUUSEPSS · bewertet 2026-10-27
Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in `Shopware\Core\Framework\Adapter\Twig\SecurityExtension` and call any arbitrary PHP function and thus execute arbitrary code/commands via usage of fully-qualified names, supplied as array of strings, when referencing callables. Users are advised to upgrade to v6.4.20.1 to resolve this issue. This is a bypass of CVE-2023-22731.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (6)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-7v2v-9rm4-7m8fShopware Has Improper Control of Generation of Code in Twig rendered views2023-04-18ghsa · osvUS
### Impact We fixed with [CVE-2023-22731](https://github.com/shopware/platform/security/advisories/GHSA-93cw-f5jj-x85w) Twig filters to only be executed with allowed functions. It is possible to pass PHP Closures as string or an array and array crafted PHP Closures was not checked against allow list ### Patches The problem has been fixed with 6.4.20.1 with an improved override. ### Workarounds For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2023-2017/cnnvd
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023cnnvd
- https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8fcnnvd
- https://starlabs.sg/advisories/23/23-2017/cnnvd
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023enisa_euvd
- https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8fenisa_euvd
- https://starlabs.sg/advisories/23/23-2017/enisa_euvd
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023Vendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan