PT-2024-40143 · Shopware · Shopware

Published 2024-05-21 · Updated 2024-05-21

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.2.16

Description: The issue allows for the execution of unauthorized foreign code under certain circumstances. A potential threat arises when a template not derived from the Shopware standard is completely copied. Themes or plugins that execute or overwrite specific template code are affected. The vulnerable code is located in the emotion.tpl file, with specific paths given for "Emotion template" and "Responsive template". The issue involves the execution of unauthorized code when a particular line of template code is not properly secured.

Recommendations: For versions prior to 5.2.16, replace the complete line beginning with {eval var=$sSupport.sFields[$sKey]... with the following: {$sSupport.sFields[$sKey]|replace:'{literal}':'|replace:'{/literal}':'|replace:'%*%':"{s name='RequiredField' namespace='frontend/register/index'}{/s}"}.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

GHSA-7336-GHHP-F2QJ

Affected Products

Shopware

References · 6

• https://osv.dev/vulnerability/GHSA-7336-ghhp-f2qj · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/shopware/shopware/2017-01-25.yaml · Note
• https://github.com/shopware5/shopware · Note
• https://github.com/shopware5/shopware/commit/6113d30a90e626154e438aa896e656c0f38694f3 · Note
• https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-01-2017?category=shopware-5-en/security-updates · Note
• https://community.shopware.com/_detail_1989.html · Note