Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70094
HistoryMay 05, 2022 - 12:00 a.m.

Shopware Cross-Site Request Forgery Vulnerability

2022-05-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
58

0.001 Low

EPSS

Percentile

26.1%

A cross-site request forgery vulnerability exists in versions of Shopware prior to 5.7.9, which stems from vulnerability to cross-site request forgery (CSRF) token authentication failures. An attacker could exploit this vulnerability to be subject to a cross-site request forgery (CSRF) attack.

CPENameOperatorVersion
shopware shopwarelt5.7.9

0.001 Low

EPSS

Percentile

26.1%