CVE-2021-32716
3 advisories.
Packagist/shopware/platform CVE-2021-32716: medium 4.4, EPSS 1.11%
Exposure of Sensitive Information to an Unauthorized Actor
Action: Upgrade shopware/platform to 6.4.1.1 or later.
composer require shopware/platform:6.4.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1.1 | - |
Fixed versions
| 6.4.1.1 |
Sources
- osv: GHSA-68v9-3jjq-rvp4
- https://github.com/shopware/platform/security/advisories/GHSA-gpmh-g94g-qrhr
- https://nvd.nist.gov/vuln/detail/CVE-2021-32716
- https://github.com/shopware/platform/commit/b5c3ce3e93bd121324d72aa9d367cb636ff1c0eb
- https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-06-2021
CVE-2021-32716 · published · modified · JSON
Packagist/shopware/platform CVE-2021-32716: medium, EPSS 1.11%
Internal hidden fields are visible on to many associations in admin api
Action: Upgrade shopware/platform to 6.4.1.1 or later.
composer require shopware/platform:6.4.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1.1 | - |
Fixed versions
| 6.4.1.1 |
Sources
- osv: GHSA-gpmh-g94g-qrhr
- https://github.com/shopware/platform/security/advisories/GHSA-gpmh-g94g-qrhr
CVE-2021-32716 · published · modified · JSON
Packagist/shopware/core CVE-2021-32716: medium, EPSS 1.11%
Internal hidden fields are visible on to many associations in admin api
Action: Upgrade shopware/core to 6.4.1.1 or later.
composer require shopware/core:6.4.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1.1 | - |
Fixed versions
| 6.4.1.1 |
Sources
- osv: GHSA-gpmh-g94g-qrhr#Packagist/shopware/core
- https://github.com/shopware/platform/security/advisories/GHSA-gpmh-g94g-qrhr
CVE-2021-32716 · published · modified · JSON