Lucene search
China National Vulnerability DatabaseCNVD-2021-63766HistoryAug 18, 2021 - 12:00 a.m.
Shopware code issue vulnerability (CNVD-2021-63766)
2021-08-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.001 Low
EPSS
Percentile
36.9%
Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 are vulnerable to a code issue that allows an authenticated attacker to upload files via URL to trigger server-side request forgery. No detailed vulnerability details are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware shopware <6. | eq | 4.3.1 |
Related
osv
osv
CVE-2021-37711
2021-08-16 23:15:08
Authenticated server-side request forgery in file upload via URL.
2021-08-23 19:42:49
cve
cve
CVE-2021-37711
2021-08-16 23:15:08
github
github
Authenticated server-side request forgery in file upload via URL.
2021-08-23 19:42:49
prion
prion
Server side request forgery (ssrf)
2021-08-16 23:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-37711
2021-08-16 23:15:08