{"action":"Upgrade shopware/shopware to 1.0.8 or later.","affected":[{"fixed":"5.2.15","introduced":"4.0.0"},{"fixed":"1.0.8","introduced":"0"}],"component":"shopware/shopware","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.2.15","1.0.8"],"ghsa_id":"GHSA-q3g4-2vw9-xv27","id":"tcs_01M5KF6VTYDGGCKC9XQ884QEX2","modified_at":"2024-12-06T05:38:17.931613Z","published_at":"2024-05-21T18:50:07Z","references":["https://osv.dev/vulnerability/GHSA-q3g4-2vw9-xv27","https://github.com/shopware5/shopware/commit/14299e9ee9f7d93f687b4ec838e0873afbc84fec","https://community.shopware.com/_detail_1989.html","https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-01-2017?category=shopware-5-en/security-updates","https://github.com/FriendsOfPHP/security-advisories/blob/master/shopware/shopware/2017-01-24.yaml","https://github.com/shopware5/shopware"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q3g4-2vw9-xv27","url":"https://osv.dev/vulnerability/GHSA-q3g4-2vw9-xv27"}],"summary":"Shopware Remote Code Execution Vulnerability"}