Vulnerability Database
290,206
Total vulnerabilities in the database
CVE-2021-37707
Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulation of product reviews via API. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
| Software | From | Fixed in |
|---|---|---|
| shopware / shopware | 6.1.0 | 6.4.3.1 |
shopware / platform
|
- | 6.4.3.1 |
|
shopware / core
|
- | 6.4.3.1 |