Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
References
| Link | Resource |
|---|---|
| https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555 | Patch Third Party Advisory |
Configurations
History
17 Mar 2022, 14:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Shopware shopware
Shopware |
|
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 3.5 |
| References | (CONFIRM) https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555 - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:* |
10 Mar 2022, 17:46
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. |
09 Mar 2022, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-09 23:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-24744
Mitre link : CVE-2022-24744
CVE.ORG link : CVE-2022-24744
JSON object : View
Products Affected
shopware
- shopware
CWE
CWE-613
Insufficient Session Expiration