Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. Affected versions of shopware do no properly set sensitive HTTP headers to be non-cacheable. If there is an HTTP cache between the server and client then headers may be exposed via HTTP caches. This issue has been resolved in version 6.4.8.2. There are no known workarounds.
References
Link | Resource |
---|---|
https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022 | Patch Vendor Advisory |
https://github.com/shopware/platform/commit/d51863148f32306aafdbc7f9f48887c69fce206f | Patch Third Party Advisory |
https://github.com/shopware/platform/security/advisories/GHSA-6wrh-279j-6hvw | Patch Third Party Advisory |
https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022 | Patch Vendor Advisory |
https://github.com/shopware/platform/commit/d51863148f32306aafdbc7f9f48887c69fce206f | Patch Third Party Advisory |
https://github.com/shopware/platform/security/advisories/GHSA-6wrh-279j-6hvw | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 06:51
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 6.3 |
References | () https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022 - Patch, Vendor Advisory | |
References | () https://github.com/shopware/platform/commit/d51863148f32306aafdbc7f9f48887c69fce206f - Patch, Third Party Advisory | |
References | () https://github.com/shopware/platform/security/advisories/GHSA-6wrh-279j-6hvw - Patch, Third Party Advisory |
30 Jun 2023, 19:04
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-668 |
Information
Published : 2022-03-09 23:15
Updated : 2024-11-21 06:51
NVD link : CVE-2022-24747
Mitre link : CVE-2022-24747
CVE.ORG link : CVE-2022-24747
JSON object : View
Products Affected
shopware
- shopware