tocsin

Packagist/shopware/core CVE-2021-32716: medium, EPSS 1.11%

Internal hidden fields are visible on to many associations in admin api

Action: Upgrade shopware/core to 6.4.1.1 or later.

composer require shopware/core:6.4.1.1

Affected

introducedfixedlast affected
06.4.1.1-

Fixed versions

6.4.1.1

Sources

CVE-2021-32716 · published · modified · JSON