Vulnerabilities > CVE-2023-23941 - Unspecified vulnerability in Shopware Swagpaypal

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

shopware

NVD

Published: 2023-02-03

Updated: 2024-11-21

Summary

SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal Plus, Smart Payment Buttons, SEPA, Pay Later, Venmo, Credit card), the amount and item list sent to PayPal may not be identical to the one in the created order. The problem has been fixed with version 5.4.4. As a workaround, disable the aforementioned payment methods or use the Security Plugin in version >= 1.0.21.

Vulnerable Configurations

Part	Description	Count
Application	Shopware Shopware Swagpaypal - Shopware Swagpaypal 0.9.0 Shopware Swagpaypal 0.10.0 Shopware Swagpaypal 0.10.1 Shopware Swagpaypal 0.11.0 Shopware Swagpaypal 0.11.1 Shopware Swagpaypal 0.12.0 Shopware Swagpaypal 0.13.0 Shopware Swagpaypal 1.0.0 Shopware Swagpaypal 1.1.0 Shopware Swagpaypal 1.1.1 Shopware Swagpaypal 1.2.0 Shopware Swagpaypal 1.3.0 Shopware Swagpaypal 1.3.1 Shopware Swagpaypal 1.4.0 Shopware Swagpaypal 1.5.0 Shopware Swagpaypal 1.5.1 Shopware Swagpaypal 1.5.2 Shopware Swagpaypal 1.6.0 Shopware Swagpaypal 1.7.0 Shopware Swagpaypal 1.7.1 Shopware Swagpaypal 1.7.2 Shopware Swagpaypal 1.7.3 Shopware Swagpaypal 1.8.0 Shopware Swagpaypal 1.8.1 Shopware Swagpaypal 1.8.2 Shopware Swagpaypal 1.8.3 Shopware Swagpaypal 1.8.4 Shopware Swagpaypal 1.9.0 Shopware Swagpaypal 1.9.1 Shopware Swagpaypal 1.9.2 Shopware Swagpaypal 1.9.3 Shopware Swagpaypal 1.10.0 Shopware Swagpaypal 2.0.0 Shopware Swagpaypal 2.0.1 Shopware Swagpaypal 2.0.2 Shopware Swagpaypal 2.1.0 Shopware Swagpaypal 2.1.1 Shopware Swagpaypal 2.1.2 Shopware Swagpaypal 2.2.0 Shopware Swagpaypal 2.2.1 Shopware Swagpaypal 2.2.2 Shopware Swagpaypal 2.2.3 Shopware Swagpaypal 2.2.4 Shopware Swagpaypal 2.2.5 Shopware Swagpaypal 2.2.6 Shopware Swagpaypal 3.0.0 Shopware Swagpaypal 3.0.1 Shopware Swagpaypal 3.0.2 Shopware Swagpaypal 3.0.3 Shopware Swagpaypal 3.1.0 Shopware Swagpaypal 3.2.0 Shopware Swagpaypal 3.2.1 Shopware Swagpaypal 3.3.0 Shopware Swagpaypal 3.3.1 Shopware Swagpaypal 3.3.1.1 Shopware Swagpaypal 3.4.0 Shopware Swagpaypal 3.5.0 Shopware Swagpaypal 4.0.0 Shopware Swagpaypal 4.1.0 Shopware Swagpaypal 4.1.1 Shopware Swagpaypal 5.0.0 Shopware Swagpaypal 5.0.1 Shopware Swagpaypal 5.0.2 Shopware Swagpaypal 5.0.3 Shopware Swagpaypal 5.0.4 Shopware Swagpaypal 5.1.0 Shopware Swagpaypal 5.1.1 Shopware Swagpaypal 5.1.2 Shopware Swagpaypal 5.2.0 Shopware Swagpaypal 5.3.0 Shopware Swagpaypal 5.3.1 Shopware Swagpaypal 5.3.2 Shopware Swagpaypal 5.4.0 Shopware Swagpaypal 5.4.1 Shopware Swagpaypal 5.4.2 Shopware Swagpaypal 5.4.3	77

Summary

Vulnerable Configurations

References