GitHub Advisoryadvisory · Packagist

GHSA-h9q8-5gv2-v6mg Potential Session Hijacking

LOW Published 2021-03-12 Modified 2026-02-02 Official page ↗
Aliases
CVE-2021-32710
Ecosystem
Packagist
Packages
shopware/platform
Severity
Low
Weaknesses
CWE-613
Reviewed
2021-03-12

Affected packages

• Packagist shopware/platform: < 6.3.5.2 → fixed in 6.3.5.2

Description

Impact Potential session hijacking of store customers. Patches We recommend to update to the current version 6.3.5.2. You can get the update to 6.3.5.2 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/#shopware-6 Workarounds For older versions of 6.1 and 6.2, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version. https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659 For more information https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2021

Related

Weakness · not in database (1)

Alias · CVE (1)

  • CVE-2021-32710 Shopware is an open source eCommerce platform. vulnerability

References