GitHub Advisoryadvisory · Packagist

GHSA-42gv-77f4-r3j9 Shopware SQL Injection

HIGH Published 2022-05-14 Modified 2023-07-25 Official page ↗

Aliases: CVE-2018-20713
Ecosystem: Packagist
Packages: shopware/shopware
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89
Reviewed: 2023-07-25

Affected packages

• Packagist shopware/shopware: < 5.4.3 → fixed in 5.4.3

Description

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

Related

Alias · CVE (1)

CVE-2018-20713 Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404. vulnerability

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References