Improper Control of Generation of Code in Twig rendered views

CVE-2023-2017

Affected version: <=6.4.20.0

Reported by:
GitHub

Shopware has Improper Input Validation issue in newsletter subscription

CVE-2023-22734

Affected version: <=6.4.18.0

Reported by:
GitHub

Shopware has Insufficient Session Expiration in Administration

CVE-2023-22732

Affected version: <=6.4.18.0

Reported by:
GitHub

Shopware's log module vulnerable to Improper Output Neutralization

CVE-2023-22733

Affected version: <=6.4.18.0

Reported by:
GitHub

Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views

CVE-2023-22731

Affected version: <=6.4.18.0

Reported by:
GitHub

Shopware vulnerable to Improper Input Validation of Clearance sale in cart

CVE-2023-22730

Affected version: <=6.4.18.0

Reported by:
GitHub

Server-Side Request Forgery (SSRF) in Shopware

CVE-2022-24871

Affected version: <=6.4.9.0

Reported by:
GitHub

Incorrect Authentication in shopware

CVE-2022-24748

Affected version: <=6.4.8.1

Reported by:
GitHub

HTTP caching is marking private HTTP headers as public in Shopware

CVE-2022-24747

Affected version: <=6.4.8.1

Reported by:
GitHub

HTML injection possibility in voucher code form in Shopware

CVE-2022-24746

Affected version: <=6.4.8.0

Reported by:
GitHub

Shopware user session is not logged out if the password is reset via password recovery

CVE-2022-24744

Affected version: <=6.4.8.0

Reported by:
GitHub