Vulnerabilities

TI-2024-25084 CVE-2024-37621 · GHSA-wj7r-p6pm-xx2r

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI)…

HIGH 67

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00693 Published 2024-06-17 No fix listed CWE-1336

TI-2024-25082 CVE-2024-37619 · GHSA-jr93-ffcv-j569

StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS)…

HIGH 66

StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00352 Published 2024-06-17 No fix listed CWE-79

Vulnerabilities

Filters

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI)…

StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS)…