{"action":"Upgrade shopware/platform to 6.4.3.1 or later.","affected":[{"fixed":"6.4.3.1","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2021-37707"],"ecosystem":"Packagist","epss":0.0089,"exploited":false,"fixed_versions":["6.4.3.1"],"ghsa_id":"GHSA-9f8f-574q-8jmf","id":"tcs_01M5KEZZPS0Y1EHRKBYSF8CHQK","modified_at":"2026-09-10T03:49:07.607237616Z","published_at":"2021-08-30T16:14:00Z","references":["https://osv.dev/vulnerability/GHSA-9f8f-574q-8jmf","https://github.com/shopware/platform/security/advisories/GHSA-9f8f-574q-8jmf","https://nvd.nist.gov/vuln/detail/CVE-2021-37707","https://github.com/shopware/platform/commit/912b96de3b839c6c5525c98cbb58f537c2d838be","https://github.com/shopware/platform"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9f8f-574q-8jmf","url":"https://osv.dev/vulnerability/GHSA-9f8f-574q-8jmf"}],"summary":"Manipulation of product reviews via API"}