Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p68v-frgx-4rjp

Опубликовано: 19 окт. 2020
Источник: github
Github: Прошло ревью

Описание

Denial of Service via Cache Flooding

Impact

Denial of Service via Cache Flooding

Patches

We recommend to update to the current version 6.3.2.1. You can get the update to 6.3.2.1 regularly via the Auto-Updater or directly via the download overview.

https://www.shopware.com/en/download/#shopware-6

Workarounds

For older versions of 6.1 and 6.2 the corresponding changes are also available via plugin:

https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659

For more information

https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-10-2020

Пакеты

Наименование

shopware/platform

composer
Затронутые версииВерсия исправления

<= 6.3.2.0

6.3.2.1

Наименование

shopware/core

composer
Затронутые версииВерсия исправления

<= 6.3.2.0

6.3.2.1

Дефекты

CWE-400

Дефекты

CWE-400