Packagist/shopware/platform CVE-2021-37710: high 8, EPSS 0.74%
Cross-Site Scripting via SVG media files
Action: Upgrade shopware/platform to 6.4.3.1 or later.
composer require shopware/platform:6.4.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.3.1 | - |
Fixed versions
| 6.4.3.1 |
Sources
- osv: GHSA-fc38-mxwr-pfhx#Packagist/shopware/platform
- https://github.com/shopware/platform/security/advisories/GHSA-fc38-mxwr-pfhx
- https://nvd.nist.gov/vuln/detail/CVE-2021-37710
- https://github.com/shopware/platform/commit/abe9f69e1f667800f974acccd3047b4930e4b423
- https://github.com/shopware/platform
CVE-2021-37710 · published · modified · JSON