shopware/core Security Advisories for v6.2.3 (32)
-
Improper Control of Generation of Code in Twig rendered views
Affected version: <=6.4.20.0
Reported by:
GitHub -
Shopware has Improper Input Validation issue in newsletter subscription
Affected version: <=6.4.18.0
Reported by:
GitHub -
Shopware has Insufficient Session Expiration in Administration
Affected version: <=6.4.18.0
Reported by:
GitHub -
Shopware's log module vulnerable to Improper Output Neutralization
Affected version: <=6.4.18.0
Reported by:
GitHub -
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Affected version: <=6.4.18.0
Reported by:
GitHub -
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Affected version: <=6.4.18.0
Reported by:
GitHub -
Reported by:
GitHub -
Reported by:
GitHub -
Reported by:
GitHub -
HTTP caching is marking private HTTP headers as public in Shopware
Affected version: <=6.4.8.1
Reported by:
GitHub -
HTML injection possibility in voucher code form in Shopware
Affected version: <=6.4.8.0
Reported by:
GitHub -
Shopware user session is not logged out if the password is reset via password recovery
Affected version: <=6.4.8.0
Reported by:
GitHub -
Webcache Poisoning in shopware/platform and shopware/core
Affected version: <=6.4.6.0
Reported by:
GitHub -
Insecure direct object reference of log files of the Import/Export feature
Affected version: <=6.4.3.0
Reported by:
GitHub -
Reported by:
GitHub -
Reported by:
GitHub -
Reported by:
GitHub -
Authenticated server-side request forgery in file upload via URL.
Affected version: <=6.4.3.0
Reported by:
GitHub -
non-admin users can create integration role with administrator role
Affected version: <=6.4.1.0
Reported by:
GitHub -
Internal hidden fields are visible on to many associations in admin api
Affected version: <=6.4.1.0
Reported by:
GitHub -
Private files publicly accessible with Cloud Storage providers
Affected version: <=6.4.1.0
Reported by:
GitHub -
Creation of order credits was not validated by acl in admin orders
Affected version: <=6.4.1.0
Reported by:
GitHub -
Canceling of orders not related to the logged-in user
Affected version: <=6.4.1.0
Reported by:
GitHub -
After order payment process manipulation in shopware/platform and shopware/core
Affected version: <=6.3.5.2
Reported by:
GitHub -
Leak of information via Store-API aggregations in shopware/platform and shopware/core
Affected version: <=6.3.5.2
Reported by:
GitHub -
Authenticated Server Side Request Forgery
Affected version: <=6.3.4.0
Reported by:
GitHub -
Information exposure via query strings in URL
Affected version: <=6.3.4.0
Reported by:
GitHub -
Authenticated Privilege Escalation
Affected version: <=6.3.4.0
Reported by:
GitHub -
Denial of Service via Cache Flooding
Affected version: <=6.3.2.0
Reported by:
GitHub -
Authenticated XML External Entity Processing
Affected version: <=6.3.2.0
Reported by:
GitHub -
Non-persistent XSS in the Storefront in Shopware
Affected version: <=6.3.1.0
Reported by:
GitHub -
RCE in Third Party Library in Shopware
Affected version: <=6.3.1.0
Reported by:
GitHub