{"action":"Upgrade shopware/core to 6.4.8.1 or later.","affected":[{"fixed":"6.4.8.1","introduced":"0"}],"component":"shopware/core","cve_ids":["CVE-2022-24744"],"ecosystem":"Packagist","epss":0.00485,"exploited":false,"fixed_versions":["6.4.8.1"],"ghsa_id":"GHSA-w267-m9c4-8555","id":"tcs_01M5KF9KWB9X2GZVTH00B01FHS","modified_at":"2023-11-08T04:08:34.821654Z","published_at":"2022-03-10T17:37:43Z","references":["https://osv.dev/vulnerability/GHSA-w267-m9c4-8555","https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555","https://nvd.nist.gov/vuln/detail/CVE-2022-24744","https://github.com/shopware/core/commit/324cd1b57db58481df1b1d0030ffc307e2d9fe64","https://github.com/shopware/platform/commit/47b4b094c13f62db860be2f431138bb45c0bd0b6","https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-02-2022?category=security-updates","https://github.com/shopware/platform"],"severity":{"label":"low","score":2.6},"sources":[{"source":"osv","source_id":"GHSA-w267-m9c4-8555#Packagist/shopware/core","url":"https://osv.dev/vulnerability/GHSA-w267-m9c4-8555"}],"summary":"Shopware user session is not logged out if the password is reset via password recovery"}