{"action":"Upgrade shopware/core to 6.4.3.1 or later.","affected":[{"fixed":"6.4.3.1","introduced":"0"}],"component":"shopware/core","cve_ids":["CVE-2021-37709"],"ecosystem":"Packagist","epss":0.00774,"exploited":false,"fixed_versions":["6.4.3.1"],"ghsa_id":"GHSA-54gp-qff8-946c","id":"tcs_01M5KEVK15FZWQH28CEPSD0R46","modified_at":"2026-09-10T03:49:15.508080595Z","published_at":"2021-08-30T16:14:19Z","references":["https://osv.dev/vulnerability/GHSA-54gp-qff8-946c","https://github.com/shopware/platform/security/advisories/GHSA-54gp-qff8-946c","https://nvd.nist.gov/vuln/detail/CVE-2021-37709","https://github.com/shopware/platform/commit/a9f52abb6eb503654c492b6b2076f8d924831fec","https://github.com/shopware/platform"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-54gp-qff8-946c#Packagist/shopware/core","url":"https://osv.dev/vulnerability/GHSA-54gp-qff8-946c"}],"summary":"Insecure direct object reference of log files of the Import/Export feature"}