Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/01/27 6:32 p.m.•60 views

Server Side Twig Template Injection

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9.8CVSS5.2AI score0.01786EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2022/01/27 6:32 p.m.•168 views

GHSA-MRQ4-7CH7-2465 Server Side Twig Template Injection

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9CVSS9.2AI score0.01786EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/01/26 8:10 p.m.•49 views

CVE-2022-21686 Server Side Twig Template Injection in PrestaShop

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9CVSS9.2AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2022/01/26 8:10 p.m.•69 views

CVE-2022-21686 Server Side Twig Template Injection in PrestaShop

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9CVSS9.6AI score0.01786EPSS
SaveExploits0References3
Mend
Mend
•added 2022/01/26 8:10 p.m.•5 views

CVE-2022-21686

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9.8CVSS0.01786EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/26 12:00 a.m.•9 views

CVE-2022-21686: Improper Control of Generation of Code

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds...

9.8CVSS5.8AI score0.01786EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•6 views

PT-2022-15037

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.7.0.0 through 1.7.8.3 Description PrestaShop is an Open Source e-commerce platform. An attacker is able to inject twig code inside the back office when using the legacy layout. Recommendations For versions 1.7.0.0 through...

9.8CVSS0.01786EPSS
SaveExploits0References11
Rows per page
Query Builder