tocsin

CVE-2021-37710

2 advisories.

Packagist/shopware/core CVE-2021-37710: high 8, EPSS 0.74%

Cross-Site Scripting via SVG media files

Action: Upgrade shopware/core to 6.4.3.1 or later.

composer require shopware/core:6.4.3.1

Affected

introducedfixedlast affected
06.4.3.1-

Fixed versions

6.4.3.1

Sources

CVE-2021-37710 · published · modified · JSON

Packagist/shopware/platform CVE-2021-37710: high 8, EPSS 0.74%

Cross-Site Scripting via SVG media files

Action: Upgrade shopware/platform to 6.4.3.1 or later.

composer require shopware/platform:6.4.3.1

Affected

introducedfixedlast affected
06.4.3.1-

Fixed versions

6.4.3.1

Sources

CVE-2021-37710 · published · modified · JSON