Shopware 6 vulnerabilities

1 known vulnerability in Shopware 6 from Shopware. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Shopware 6: Improper Control of Generation of Code

  CVE-2023-2017Apr 17, 2023ShopwareEPSS 2.07%

  Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to