What is GHSA-7vmw-7x57-q6jw?

GHSA-7vmw-7x57-q6jw is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting

Which CVE IDs does GHSA-7vmw-7x57-q6jw cover?

GHSA-7vmw-7x57-q6jw covers the following CVE IDs: CVE-2021-32713. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7vmw-7x57-q6jw?

GHSA-7vmw-7x57-q6jw has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

Which products are affected by GHSA-7vmw-7x57-q6jw?

GHSA-7vmw-7x57-q6jw affects 1 product, including: composer/shopware/shopware:\u003c 5.6.10.

GHSA-7vmw-7x57-q6jwMediumCVSS 4.8

Cross-site scripting

Vendor

GitHub Security Advisories

Published

September 8, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-32713 →

📋 Description

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

🎯 Affected products1

composer/shopware/shopware:< 5.6.10

🔗 References (5)

https://github.com/shopware/shopware/security/advisories/GHSA-f6p7-8xfw-fjqq
https://nvd.nist.gov/vuln/detail/CVE-2021-32713
https://github.com/shopware/shopware/commit/a0850ffbc6f581a8eb8425cc2bf77a0715e21e12
https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021
https://github.com/advisories/GHSA-7vmw-7x57-q6jw