{"action":"Upgrade shopware/shopware to 4.3.7 or later.","affected":[{"fixed":"4.3.7","introduced":"0"},{"fixed":"5.1.5","introduced":"5.0.0"}],"component":"shopware/shopware","cve_ids":["CVE-2016-3109"],"ecosystem":"Packagist","epss":0.28106,"exploited":false,"fixed_versions":["4.3.7","5.1.5"],"ghsa_id":"GHSA-cj2f-96jq-phpp","id":"tcs_01M5KF10Z59VDQS4V3GJFWMMYP","modified_at":"2024-02-16T08:21:54.906253Z","published_at":"2022-05-14T02:46:24Z","references":["https://osv.dev/vulnerability/GHSA-cj2f-96jq-phpp","https://nvd.nist.gov/vuln/detail/CVE-2016-3109","https://github.com/shopware/shopware/commit/d73e9031a5b2ab6e918eb86d1e2b2e873cd3558d","https://community.shopware.com/_detail_1918.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/shopware/shopware/CVE-2016-3109.yaml","https://web.archive.org/web/20200814090044/http://www.securityfocus.com/archive/1/538173/100/0/threaded","https://web.archive.org/web/20210125193827/http://www.securityfocus.com/bid/97979","http://packetstormsecurity.com/files/136781/Shopware-Remote-Code-Execution.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cj2f-96jq-phpp","url":"https://osv.dev/vulnerability/GHSA-cj2f-96jq-phpp"}],"summary":"Shopware RCE Vulnerability"}