GitHub Advisoryadvisory · Packagist

GHSA-9vxv-wpv4-f52p Information leakage in Error Handler

MEDIUM Published 2021-05-21 Modified 2021-05-18 Official page ↗
Ecosystem
Packagist
Packages
shopware/shopware
Severity
Moderate
Weaknesses
CWE-209
Reviewed
2021-05-18

Affected packages

• Packagist shopware/shopware: < 5.6.10 → fixed in 5.6.10

Description

Impact Information leakage in Error Handler Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References