Packagist/shopware/shopware CVE-2017-15374: medium 6.1, EPSS 4.81%
Shopware XSS Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.5 | - | 5.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mvrx-cmqw-2jgj
- https://nvd.nist.gov/vuln/detail/CVE-2017-15374
- https://www.exploit-db.com/exploits/43849
- https://www.vulnerability-lab.com/get_content.php?id=1922
CVE-2017-15374 · published · modified · JSON