{"action":"Upgrade shopware/platform to 6.4.10.1 or later.","affected":[{"fixed":"6.4.10.1","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2022-24871"],"ecosystem":"Packagist","epss":0.01059,"exploited":false,"fixed_versions":["6.4.10.1"],"ghsa_id":"GHSA-7gm7-8q8v-9gf2","id":"tcs_01M5KEY2ZMXNZP3D7ED2TEDY55","modified_at":"2023-11-08T04:08:38.988816Z","published_at":"2022-04-22T21:04:07Z","references":["https://osv.dev/vulnerability/GHSA-7gm7-8q8v-9gf2","https://github.com/shopware/platform/security/advisories/GHSA-7gm7-8q8v-9gf2","https://nvd.nist.gov/vuln/detail/CVE-2022-24871","https://github.com/shopware/platform/commit/083765e2d64a00315050c4891800c9e98ba0c77c","https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2022","https://github.com/shopware/platform"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-7gm7-8q8v-9gf2","url":"https://osv.dev/vulnerability/GHSA-7gm7-8q8v-9gf2"}],"summary":"Server-Side Request Forgery (SSRF) in Shopware"}