High · 7.2 CVE-2024-37621 EUVD-2024-36771GHSA-wj7r-p6pm-xx2r

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/ind…

Published Jun 17, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

References

https://github.com/Hebing123/cve/issues/47
https://www.strongshop.cn