Skip to content
OpenAdvisories

Vendor

shopware

67 known vulnerabilities.

Products

shopware 39 platform 33 core 3 commercial 1 Shopware 6 1 SwagPayPal 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-22406

    Blind SQL-injection in DAL aggregations in Shopware

    Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated usi…

    shopware shopware shopware/platform shopware/core Packagist
  • Critical 10.0
    CVE-2023-22731

    Improper Control of Generation of Code in Twig rendered views in shopware

    Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to refer to PHP functions in twig filters like `map`, `filter`, `sort`. This allows a template to call …

    shopware platform shopware/platform shopware/core Packagist
  • Critical 9.1
    CVE-2021-32711

    Leak of information via Store-API

    Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API …

    shopware platform shopware/platform Packagist