Packagist/shopware/storefront CVE-2022-24747: medium 6.3, EPSS 1.10%
HTTP caching is marking private HTTP headers as public in Shopware
Action: Upgrade shopware/storefront to 6.4.8.2 or later.
composer require shopware/storefront:6.4.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.8.2 | - |
Fixed versions
| 6.4.8.2 |
Sources
- osv: GHSA-6wrh-279j-6hvw#Packagist/shopware/storefront
- https://github.com/shopware/platform/security/advisories/GHSA-6wrh-279j-6hvw
- https://nvd.nist.gov/vuln/detail/CVE-2022-24747
- https://github.com/shopware/platform/commit/d51863148f32306aafdbc7f9f48887c69fce206f
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022
- https://github.com/shopware/platform
CVE-2022-24747 · published · modified · JSON