Skip to content

RCE in Third Party Library in Shopware

Low severity GitHub Reviewed Published Sep 21, 2020 in shopware/shopware • Updated Jan 9, 2023

Package

composer shopware/core (Composer)

Affected versions

<= 6.3.1.0

Patched versions

6.3.1.1
composer shopware/platform (Composer)
<= 6.3.1.0
6.3.1.1

Description

Impact

RCE in Third Party Library

Patches

We recommend to update to the current version 6.3.1.1. You can get the update to 6.3.1.1 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin:
https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659

References

https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-09-2020

References

@shopwareBot shopwareBot published to shopware/shopware Sep 21, 2020
Reviewed Sep 23, 2020
Published to the GitHub Advisory Database Sep 23, 2020
Last updated Jan 9, 2023

Severity

Low

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-qvc5-cfrr-384v

Source code

No known source code

Credits

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.