What is GHSA-9vxv-wpv4-f52p?

GHSA-9vxv-wpv4-f52p is a security advisory published by GitHub Security Advisories with Medium severity. Information leakage in Error Handler

Why does GHSA-9vxv-wpv4-f52p have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-9vxv-wpv4-f52p?

GHSA-9vxv-wpv4-f52p affects 1 product, including: composer/shopware/shopware:\u003c= 5.6.9.

GHSA-9vxv-wpv4-f52pMediumDisclosed before NVD

Information leakage in Error Handler

Vendor

GitHub Security Advisories

Published

May 21, 2021

Last Modified

January 9, 2023

📋 Description

Impact

Information leakage in Error Handler

Patches

We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021

🎯 Affected products1

composer/shopware/shopware:<= 5.6.9

🔗 References (2)

https://github.com/shopware/shopware/security/advisories/GHSA-9vxv-wpv4-f52p
https://github.com/advisories/GHSA-9vxv-wpv4-f52p