Vulnerabilities > Shopware > Shopware > 5.2.4

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2024-22406 SQL Injection vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-89
critical
9.8
2024-01-16 CVE-2024-22407 Improper Access Control vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-284
6.5
2024-01-16 CVE-2024-22408 Server-Side Request Forgery (SSRF) vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-918
8.1
2023-06-27 CVE-2023-34099 Improper Check for Unusual or Exceptional Conditions vulnerability in Shopware
Shopware is an open source e-commerce software.
network
low complexity
shopware CWE-754
5.3
2023-01-17 CVE-2023-22730 Improper Input Validation vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-20
7.5
2023-01-17 CVE-2023-22731 Code Injection vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-94
8.8
2023-01-17 CVE-2023-22732 Insufficient Session Expiration vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-613
critical
9.8
2023-01-17 CVE-2023-22733 Information Exposure Through Log Files vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-532
6.5
2023-01-17 CVE-2023-22734 Improper Input Validation vulnerability in Shopware
Shopware is an open source commerce platform based on Symfony Framework and Vue js.
network
low complexity
shopware CWE-20
7.5
2022-09-12 CVE-2022-36101 Unspecified vulnerability in Shopware
Shopware is an open source e-commerce software.
network
low complexity
shopware
5.3