{"action":"Upgrade shopware/platform to 6.4.20.1 or later.","affected":[{"fixed":"6.4.20.1","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2023-2017"],"ecosystem":"Packagist","epss":0.02066,"exploited":false,"fixed_versions":["6.4.20.1"],"ghsa_id":"GHSA-7v2v-9rm4-7m8f","id":"tcs_01M5KEYD33KDS36QFHM5TXPR4S","modified_at":"2026-09-10T03:49:53.609765947Z","published_at":"2023-04-18T13:14:20Z","references":["https://osv.dev/vulnerability/GHSA-7v2v-9rm4-7m8f","https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8f","https://github.com/shopware/shopware/security/advisories/GHSA-7v2v-9rm4-7m8f","https://nvd.nist.gov/vuln/detail/CVE-2023-2017","https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023","https://github.com/shopware/platform","https://github.com/shopware/platform/releases/tag/v6.4.20.1","https://starlabs.sg/advisories/23/23-2017"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7v2v-9rm4-7m8f","url":"https://osv.dev/vulnerability/GHSA-7v2v-9rm4-7m8f"}],"summary":"Shopware Has Improper Control of Generation of Code in Twig rendered views"}