GHSA-qwpp-fgrj-h78q

Source

https://github.com/advisories/GHSA-qwpp-fgrj-h78q

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-qwpp-fgrj-h78q/GHSA-qwpp-fgrj-h78q.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-qwpp-fgrj-h78q

Aliases

CVE-2021-32712

Published

2021-09-08T17:59:46Z

Modified

2026-03-13T22:11:23.714079Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Exposure of Sensitive Information to an Unauthorized Actor

Details

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in error handling. Users are recommend to update to version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

Database specific

{
    "github_reviewed_at": "2021-06-25T15:32:28Z",
    "nvd_published_at": "2021-06-24T21:15:00Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-200",
        "CWE-209"
    ],
    "severity": "MODERATE"
}

References

Affected packages

Packagist / shopware/shopware

Package

Name: shopware/shopware
Purl: pkg:composer/shopware/shopware

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.10

Affected versions

1.*

1.0.2

1.0.8

4.*

4.2.0-rc.1

4.2.0

4.2.1

4.2.1.1

4.2.2

4.2.3

4.3.0

4.3.1

4.3.2

4.3.3

4.3.4

4.3.5

4.3.6

4.3.7

v5.*

v5.0.0-BETA1

v5.0.0-BETA2

v5.0.0-RC1

v5.0.0-RC2

v5.0.0-RC3

v5.0.0

v5.0.1

v5.0.2-RC1

v5.0.2

v5.0.3-RC1

v5.0.3

v5.0.4-RC1

v5.0.4

v5.1.0-RC2

v5.1.0-RC3

v5.1.0

v5.1.1

v5.1.2-RC1

v5.1.2-RC2

v5.1.2

v5.1.3-RC1

v5.1.3

v5.1.4

v5.1.5

v5.1.6

v5.2.0-BETA1

v5.2.0-RC1

v5.2.0-RC2

v5.2.0-RC3

v5.2.0

v5.2.1

v5.2.2

v5.2.3

v5.2.4

v5.2.5

v5.2.6

v5.2.7

v5.2.8

v5.2.9

v5.2.10

v5.2.11

v5.2.12

v5.2.13

v5.2.14

v5.2.15

v5.2.16

v5.2.17

v5.2.18

v5.2.19

v5.2.20

v5.2.21

v5.2.22

v5.2.23

v5.2.24

v5.2.25

v5.2.26

v5.2.27

v5.3.4

v5.3.5

v5.3.6

v5.3.7

v5.4.0-RC1

v5.4.0

v5.4.1

v5.4.2

v5.4.3

v5.4.4

v5.4.5

v5.4.6

v5.5.0-BETA1

v5.5.0-RC1

v5.5.0

v5.5.1

v5.5.2

v5.5.3

v5.5.4

v5.5.5

v5.5.6

v5.5.7

v5.5.8

v5.5.9

v5.5.10

v5.6.0-RC1

v5.6.0

v5.6.1

v5.6.2

v5.6.3

v5.6.4

v5.6.5

v5.6.6

v5.6.7

v5.6.8

v5.6.9

5.*

5.3.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-qwpp-fgrj-h78q/GHSA-qwpp-fgrj-h78q.json"