GHSA-h9q8-5gv2-v6mg
Suggest an improvement- Source
- https://github.com/advisories/GHSA-h9q8-5gv2-v6mg
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-h9q8-5gv2-v6mg/GHSA-h9q8-5gv2-v6mg.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-h9q8-5gv2-v6mg
- Related
- Published
- 2021-03-12T23:09:08Z
- Modified
- 2024-12-02T05:46:04.465287Z
- Summary
- Potential Session Hijacking
- Details
-
Impact
Potential session hijacking of store customers.
Patches
We recommend to update to the current version 6.3.5.2. You can get the update to 6.3.5.2 regularly via the Auto-Updater or directly via the download overview.
https://www.shopware.com/en/download/#shopware-6
Workarounds
For older versions of 6.1 and 6.2, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659
For more information
https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2021
- Database specific
{ "github_reviewed_at": "2021-03-12T22:10:34Z", "cwe_ids": [ "CWE-613" ], "severity": "LOW", "github_reviewed": true, "nvd_published_at": null }- References
Affected packages
Packagist / shopware/platform
Package
- Name
- shopware/platform
- Purl
- pkg:composer/shopware/platform
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.3.5.2