Description
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopware/core | >= 6.0.0, < 6.2.3 | 6.2.3 | GHSA-r4ph-mx67-x58p |
| Packagist | shopware/platform | >= 6.0.0, < 6.2.3 | 6.2.3 | GHSA-r4ph-mx67-x58p |