Skip to content
OpenAdvisories

Product · shopware

platform

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-22731

    Improper Control of Generation of Code in Twig rendered views in shopware

    Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to refer to PHP functions in twig filters like `map`, `filter`, `sort`. This allows a template to call …

    shopware platform shopware/platform shopware/core Packagist
  • Critical 9.1
    CVE-2021-32711

    Leak of information via Store-API

    Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API …

    shopware platform shopware/platform Packagist