tocsin

CVE-2020-13997

2 advisories.

Packagist/shopware/core CVE-2020-13997: high 7.5, EPSS 1.49%

Shopware database password is leaked to an unauthenticated users

Action: Upgrade shopware/core to 6.2.3 or later.

composer require shopware/core:6.2.3

Affected

introducedfixedlast affected
6.0.06.2.3-

Fixed versions

6.2.3

Sources

CVE-2020-13997 · published · modified · JSON

Packagist/shopware/platform CVE-2020-13997: high 7.5, EPSS 1.49%

Shopware database password is leaked to an unauthenticated users

Action: Upgrade shopware/platform to 6.2.3 or later.

composer require shopware/platform:6.2.3

Affected

introducedfixedlast affected
6.0.06.2.3-

Fixed versions

6.2.3

Sources

CVE-2020-13997 · published · modified · JSON