Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 70
Reset filtersShopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Shopware Improper Session Handling in store-api account logout
Shopware's session is persistent in Cache for 404 pages
Broken Access Control order API in Shopware
Blind SQL injection in shopware
Shopware Has Improper Control of Generation of Code in Twig rendered views
Shopware has Improper Input Validation issue in newsletter subscription
Shopware has Insufficient Session Expiration in Administration
Shopware's log module vulnerable to Improper Output Neutralization
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Shopware database password is leaked to an unauthenticated users
Shopware vulnerable to Cross-site Scripting
Shopware vulnerable to SSRF
Improper Access Control in Shopware
Server-Side Request Forgery (SSRF) in Shopware
HTTP caching is marking private HTTP headers as public in Shopware
HTML injection possibility in voucher code form in Shopware
Shopware user session is not logged out if the password is reset via password recovery
Shopware guest session is shared between customers
Webcache Poisoning in shopware/platform and shopware/core
Insecure direct object reference of log files of the Import/Export feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.