Skip to content
OpenAdvisories

Package · Packagist

shopware/platform

70 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-22406

    Blind SQL-injection in DAL aggregations in Shopware

    Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated usi…

    shopware shopware shopware/platform shopware/core Packagist
  • Critical 10.0
    CVE-2023-22731

    Improper Control of Generation of Code in Twig rendered views in shopware

    Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to refer to PHP functions in twig filters like `map`, `filter`, `sort`. This allows a template to call …

    shopware platform shopware/platform shopware/core Packagist
  • Critical —
    GHSA-r64m-qchj-hrjp

    Webcache Poisoning in shopware/platform and shopware/core

    ### Impact Webcache Poisoning via X-Forwarded-Prefix and sub-request ### Patches We recommend updating to the current version 6.4.6.1. You can get the update to 6.4.6.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware…

    shopware/platform shopware/core Packagist
  • Critical 9.1
    CVE-2021-32711

    Leak of information via Store-API

    Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API …

    shopware platform shopware/platform Packagist
  • Critical —
    GHSA-88rc-3p98-rgvx

    After order payment process manipulation in shopware/platform and shopware/core

    ### Impact After order payment process manipulation ### Patches We recommend to update to the current version 6.3.5.3. You can get the update to 6.3.5.3 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download…

    shopware/platform shopware/core Packagist
  • Critical —
    GHSA-qg7c-q3vq-rgxr

    Leak of information via Store-API aggregations in shopware/platform and shopware/core

    ### Impact Leak of information via Store-API ### Patches We recommend to update to the current version 6.3.5.3. You can get the update to 6.3.5.3 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/#shopw…

    shopware/platform shopware/core Packagist