Skip to content

Information leakage in Error Handler

Moderate
shyim published GHSA-9vxv-wpv4-f52p May 10, 2021

Package

composer shopware/shopware (Composer)

Affected versions

<=5.6.9

Patched versions

5.6.10

Description

Impact

Information leakage in Error Handler

Patches

We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin:
https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021

Severity

Moderate

CVE ID

CVE-2021-32712

Weaknesses

No CWEs