{"action":"Upgrade shopware/platform to 6.4.18.1 or later.","affected":[{"fixed":"6.4.18.1","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2023-22732"],"ecosystem":"Packagist","epss":0.00764,"exploited":false,"fixed_versions":["6.4.18.1"],"ghsa_id":"GHSA-59qg-93jg-236f","id":"tcs_01M5KEVX0DAW0PG2CQB4RVVDNX","modified_at":"2026-09-10T03:49:56.482931988Z","published_at":"2023-01-20T23:18:17Z","references":["https://osv.dev/vulnerability/GHSA-59qg-93jg-236f","https://github.com/shopware/platform/security/advisories/GHSA-59qg-93jg-236f","https://nvd.nist.gov/vuln/detail/CVE-2023-22732","https://github.com/shopware/platform/commit/cd7a89cbcd3a0428c6d1ef27b3aa15467a722ff6","https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates","https://github.com/shopware/platform"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-59qg-93jg-236f","url":"https://osv.dev/vulnerability/GHSA-59qg-93jg-236f"}],"summary":"Shopware has Insufficient Session Expiration in Administration"}