What is GHSA-f6p7-8xfw-fjqq?

GHSA-f6p7-8xfw-fjqq is a security advisory published by GitHub Security Advisories with Medium severity. Authenticated Stored XSS in Administration

Why does GHSA-f6p7-8xfw-fjqq have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-f6p7-8xfw-fjqq?

GHSA-f6p7-8xfw-fjqq affects 1 product, including: composer/shopware/shopware:\u003c= 5.6.9.

GHSA-f6p7-8xfw-fjqqMediumDisclosed before NVD

Authenticated Stored XSS in Administration

Vendor

GitHub Security Advisories

Published

May 21, 2021

Last Modified

January 9, 2023

📋 Description

Impact

Authenticated Stored XSS in Administration

Patches

We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021

🎯 Affected products1

composer/shopware/shopware:<= 5.6.9

🔗 References (3)

https://github.com/shopware/shopware/security/advisories/GHSA-f6p7-8xfw-fjqq
https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021
https://github.com/advisories/GHSA-f6p7-8xfw-fjqq