~ / search / GHSA-42gv-77f4-r3j9

GHSA-42gv-77f4-r3j9

Shopware SQL Injection

Source: GitHub Advisory Database (reviewed) High CVE-2018-20713

Packages

EcosystemPackageAffectedFixed in
Packagist shopware/shopware < 5.4.3 5.4.3

Details

As written in the advisory (Markdown source, shown as plain text).

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

References

External links from the advisory. They lead to third-party sites.