Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7vmw-7x57-q6jw

Опубликовано: 08 сент. 2021
Источник: github
Github: Прошло ревью
CVSS3: 4.8

Описание

Cross-site scripting

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

Пакеты

Наименование

shopware/shopware

composer
Затронутые версииВерсия исправления

< 5.6.10

5.6.10

EPSS

Процентиль: 60%
0.0039
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 4 лет назад

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

EPSS

Процентиль: 60%
0.0039
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79