Skip to content

Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability

Moderate severity GitHub Reviewed Published Dec 18, 2024 to the GitHub Advisory Database • Updated Dec 18, 2024
Withdrawn This advisory was withdrawn on Dec 18, 2024

Package

composer opencart/opencart (Composer)

Affected versions

<= 4.0.2.3

Patched versions

None

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-xrh7-2gfq-4rcq. This link is maintained to preserve external references.

Original Description

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.

References

Published by the National Vulnerability Database Dec 18, 2024
Published to the GitHub Advisory Database Dec 18, 2024
Reviewed Dec 18, 2024
Withdrawn Dec 18, 2024
Last updated Dec 18, 2024

Severity

Moderate

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-j2v2-3784-vr44

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.