← All advisories

High severityGHSA Advisory· Published Jan 15, 2019· Updated Aug 5, 2024

CVE-2018-20713

CVE-2018-20713

Description

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
shopware/shopwarePackagist	< 5.4.3	5.4.3

Affected products

2

Aimeos/ShopwareGHSA
Range: < 5.4.3
Package: https://packagist.org/packages/shopware/shopware
ghsa-coords
pkg:composer/shopware/shopware
Range: < 5.4.3

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-42gv-77f4-r3j9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20713ghsaADVISORY
docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2018ghsax_refsource_MISCWEB
github.com/shopware5/shopware/commit/73cb46727050e28a0d7c2cf8471baaa3eaf2e5e8ghsaWEB

News mentions

0

No linked articles in our index yet.