GitHub Advisoryadvisory · Packagist

GHSA-qwpp-fgrj-h78q Exposure of Sensitive Information to an Unauthorized Actor

MEDIUM Published 2021-09-08 Modified 2021-06-25 Official page ↗
Aliases
CVE-2021-32712
Ecosystem
Packagist
Packages
shopware/shopware
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200, CWE-209
Reviewed
2021-06-25

Affected packages

• Packagist shopware/shopware: < 5.6.10 → fixed in 5.6.10

Description

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in error handling. Users are recommend to update to version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

Related

Alias · CVE (1)

  • CVE-2021-32712 Shopware is an open source eCommerce platform. vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References