Packagist/shopware/core: medium 5
Shopware 6's password recovery link does not expire after email change
Action: Upgrade shopware/core to 6.6.10.9 or later.
composer require shopware/core:6.6.10.9composer require shopware/core:6.7.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.6.10.9 | - |
| 6.7.0.0 | 6.7.4.1 | - |
Fixed versions
| 6.6.10.9 | 6.7.4.1 |
Sources
- osv: GHSA-2w46-vq8h-98vh
- https://github.com/shopware/shopware/security/advisories/GHSA-2w46-vq8h-98vh
- https://github.com/shopware/shopware/commit/1338dd9a11e361639704bf8f09b6878552eb8c13
- https://github.com/shopware/shopware/commit/2fb94855696a90045b81c503d216ba7df8e64e52
- https://github.com/shopware/shopware
- https://github.com/shopware/shopware/releases/tag/v6.6.10.9
- https://github.com/shopware/shopware/releases/tag/v6.7.0.0
- https://github.com/shopware/shopware/releases/tag/v6.7.4.1
published · modified · JSON