Packagist/prestashop/prestashop CVE-2022-21686: critical 9, EPSS 1.79%
Server Side Twig Template Injection
Action: Upgrade prestashop/prestashop to 1.7.8.3 or later.
composer require prestashop/prestashop:1.7.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0.0 | 1.7.8.3 | - |
Fixed versions
| 1.7.8.3 |
Sources
- osv: GHSA-mrq4-7ch7-2465
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mrq4-7ch7-2465
- https://nvd.nist.gov/vuln/detail/CVE-2022-21686
- https://github.com/PrestaShop/PrestaShop/commit/d02b469ec365822e6a9f017e57f588966248bf21
- https://github.com/PrestaShop/PrestaShop
- https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.3
CVE-2022-21686 · published · modified · JSON