CVE-2024-27917
2 advisories.
Packagist/shopware/storefront CVE-2024-27917: high 7.5, EPSS 0.61%
Shopware's session is persistent in Cache for 404 pages
Action: Upgrade shopware/storefront to 6.5.8.7 or later.
composer require shopware/storefront:6.5.8.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.5.8.0 | 6.5.8.7 | - |
Fixed versions
| 6.5.8.7 |
Sources
- osv: GHSA-c2f9-4jmm-v45m
- https://github.com/shopware/shopware/security/advisories/GHSA-c2f9-4jmm-v45m
- https://github.com/shopware/shopware/commit/7d9cb03225efca5f97e69b800d8747598dd15ce3
- https://github.com/shopware/storefront/commit/3477e4a425d3c54b4bfae82d703fe3838dc21d3e
- https://github.com/shopware/shopware
- https://github.com/shopware/shopware/releases/tag/v6.5.8.7
CVE-2024-27917 · published · modified · JSON
Packagist/shopware/platform CVE-2024-27917: high 7.5, EPSS 0.61%
Shopware's session is persistent in Cache for 404 pages
Action: Upgrade shopware/platform to 6.5.8.7 or later.
composer require shopware/platform:6.5.8.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.5.8.0 | 6.5.8.7 | - |
Fixed versions
| 6.5.8.7 |
Sources
- osv: GHSA-c2f9-4jmm-v45m#Packagist/shopware/platform
- https://github.com/shopware/shopware/security/advisories/GHSA-c2f9-4jmm-v45m
- https://github.com/shopware/shopware/commit/7d9cb03225efca5f97e69b800d8747598dd15ce3
- https://github.com/shopware/storefront/commit/3477e4a425d3c54b4bfae82d703fe3838dc21d3e
- https://github.com/shopware/shopware
- https://github.com/shopware/shopware/releases/tag/v6.5.8.7
CVE-2024-27917 · published · modified · JSON