Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-32710 EUVD-2021-2034GHSA-c7vg-w8q8-c3wfGHSA-h9q8-5gv2-v6mg

Potential Session Hijacking in Shopware

Published Jun 24, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Shopware is an open source eCommerce platform. Potential session hijacking of store customers in versions below 6.3.5.2. We recommend to update to the current version 6.3.5.2. You can get the update to 6.3.5.2 regularly via the Auto-Updater or directly via the download overview. For older versions of 6.1 and 6.2, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

Affected products

VendorProductAffectedFixed
shopware platform < 6.3.5.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist shopware/platform < 6.3.5.2 6.3.5.2 GHSA-h9q8-5gv2-v6mg

References