Em resumo
- CVE-2017-18357 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta shopware/shopware, shopware (shopware).
- Chance de exploração nos próximos 30 dias (EPSS): 27.1%, maior que 98.0% das vulnerabilidades.
- Correção: atualize para 5.3.4 ou posterior.
Description
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.
NVD description
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.
Mais vulnerabilidades de shopware/shopware
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free