GHSA-c53v-qmrx-93hg

Open redirect in shopware

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-21651

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	shopware/shopware	>= 5.0.0, < 5.7.7	5.7.7

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Arbitrary redirect while using certain URLs ### Patches We recommend updating to the current version 5.7.7. You can get the update to 5.7.7 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html ### References https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022

References

External links from the advisory. They lead to third-party sites.

https://github.com/shopware/shopware/security/advisories/GHSA-c53v-qmrx-93hg web
https://nvd.nist.gov/vuln/detail/CVE-2022-21651 advisory
https://github.com/shopware/shopware/commit/a90046c765c57a46c4399dce17bd174253c32886 web
https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022 web
https://github.com/shopware/shopware package