GitHub Advisoryadvisory · Packagist

GHSA-qvc5-cfrr-384v RCE in Third Party Library in Shopware

LOW Published 2020-09-23 Modified 2020-09-23 Official page ↗

Ecosystem: Packagist
Packages: shopware/platform, shopware/core
Severity: Low
Reviewed: 2020-09-23

Affected packages

• Packagist shopware/platform: < 6.3.1.1 → fixed in 6.3.1.1 • Packagist shopware/core: < 6.3.1.1 → fixed in 6.3.1.1

Description

Impact RCE in Third Party Library Patches We recommend to update to the current version 6.3.1.1. You can get the update to 6.3.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin: https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659 References https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-09-2020

References