Описание
Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 the admin api has exposed some internal hidden fields when an association has been loaded with a to many reference. Users are recommend to update to version 6.4.1.1. You can get the update to 6.4.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
Ссылки
- Vendor Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Vendor Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.1.0 (включая) до 6.4.1.1 (исключая)
cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00308
Низкий
4.4 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
CWE-863
Связанные уязвимости
CVSS3: 4.4
github
больше 4 лет назад
Exposure of Sensitive Information to an Unauthorized Actor
EPSS
Процентиль: 54%
0.00308
Низкий
4.4 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
CWE-863