Vulnerabilities > Shopware > Shopware > 5.1.3

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2024-22406 SQL Injection vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-89
critical
9.8
2024-01-16 CVE-2024-22407 Improper Access Control vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-284
6.5
2024-01-16 CVE-2024-22408 Server-Side Request Forgery (SSRF) vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-918
8.1
2023-01-17 CVE-2023-22730 Improper Input Validation vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-20
7.5
2023-01-17 CVE-2023-22731 Code Injection vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-94
8.8
2023-01-17 CVE-2023-22732 Insufficient Session Expiration vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-613
critical
9.8
2023-01-17 CVE-2023-22733 Information Exposure Through Log Files vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-532
6.5
2023-01-17 CVE-2023-22734 Improper Input Validation vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-20
7.5
2022-09-12 CVE-2022-36101 Unspecified vulnerability in Shopware
Shopware is an open source e-commerce software.
network
low complexity
shopware
5.3
2022-06-27 CVE-2022-31057 Cross-site Scripting vulnerability in Shopware
Shopware is an open source e-commerce software made in Germany.
network
shopware CWE-79
3.5