Description
The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopware/shopware | < 4.3.7 | 4.3.7 | GHSA-cj2f-96jq-phpp |
| Packagist | shopware/shopware | >= 5.0.0, < 5.1.5 | 5.1.5 | GHSA-cj2f-96jq-phpp |