tocsin

CVE-2021-37707

2 advisories.

Packagist/shopware/platform CVE-2021-37707: medium 6.5, EPSS 0.89%

Manipulation of product reviews via API

Action: Upgrade shopware/platform to 6.4.3.1 or later.

composer require shopware/platform:6.4.3.1

Affected

introducedfixedlast affected
06.4.3.1-

Fixed versions

6.4.3.1

Sources

CVE-2021-37707 · published · modified · JSON

Packagist/shopware/core CVE-2021-37707: medium 6.5, EPSS 0.89%

Manipulation of product reviews via API

Action: Upgrade shopware/core to 6.4.3.1 or later.

composer require shopware/core:6.4.3.1

Affected

introducedfixedlast affected
06.4.3.1-

Fixed versions

6.4.3.1

Sources

CVE-2021-37707 · published · modified · JSON