{"action":"Upgrade shopware/core to 6.4.10.1 or later.","affected":[{"fixed":"6.4.10.1","introduced":"0"}],"component":"shopware/core","cve_ids":["CVE-2022-24872"],"ecosystem":"Packagist","epss":0.01052,"exploited":false,"fixed_versions":["6.4.10.1"],"ghsa_id":"GHSA-9wrv-g75h-8ccc","id":"tcs_01M5KF0CD2XRQH5FP233W7KC2G","modified_at":"2023-11-08T04:08:39.049366Z","published_at":"2022-04-22T21:04:27Z","references":["https://osv.dev/vulnerability/GHSA-9wrv-g75h-8ccc","https://github.com/shopware/platform/security/advisories/GHSA-9wrv-g75h-8ccc","https://nvd.nist.gov/vuln/detail/CVE-2022-24872","https://github.com/shopware/platform/commit/083765e2d64a00315050c4891800c9e98ba0c77c","https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2022","https://github.com/shopware/platform"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-9wrv-g75h-8ccc#Packagist/shopware/core","url":"https://osv.dev/vulnerability/GHSA-9wrv-g75h-8ccc"}],"summary":"Improper Access Control in Shopware"}