GitHub Advisoryadvisory · Packagist

GHSA-xrh7-2gfq-4rcq openCart Server-Side Template Injection (SSTI) vulnerability

MEDIUM Published 2024-07-17 Modified 2024-12-18 Official page ↗

Aliases: CVE-2024-36694
Ecosystem: Packagist
Packages: opencart/opencart
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-1336, CWE-94
Reviewed: 2024-07-17

Affected packages

• Packagist opencart/opencart: <= 4.0.2.3 (no fix yet)

Description

A Server-Side Template Injection (SSTI) vulnerability in the Theme Editor Function of openCart project v4.0.2.3 allows attackers to execute arbitrary code via injecting a crafted payload.

Alias · CVE (1)

CVE-2024-36694 OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function. vulnerability

Weakness · CWE (2)

CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine weakness
CWE-94 Improper Control of Generation of Code weakness

References

https://nvd.nist.gov/vuln/detail/CVE-2024-36694 advisory
https://github.com/opencart/opencart/issues/13863 web
https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md web
https://github.com/opencart/opencart package
https://github.com/opencart/opencart/releases/tag/4.0.2.3 web
https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9 web