Packagist/shopware/storefront CVE-2022-24745: medium 4.8, EPSS 0.53%
Shopware guest session is shared between customers
Action: Upgrade shopware/storefront to 6.4.8.2 or later.
composer require shopware/storefront:6.4.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.8.2 | - |
Fixed versions
| 6.4.8.2 |
Sources
- osv: GHSA-jp6h-mxhx-pgqh#Packagist/shopware/storefront
- https://github.com/shopware/platform/security/advisories/GHSA-jp6h-mxhx-pgqh
- https://nvd.nist.gov/vuln/detail/CVE-2022-24745
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022?_ga=2.159980029.1931762803.1646933116-1088482757.1646933116
- https://github.com/shopware/platform
CVE-2022-24745 · published · modified · JSON