Privilege Escalation

2022-03-1003:50:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.7%

JSON

shopware/core is vulnerable to privilege escalation. The The vulnerability exists due to lack of validate API library which allows to an attacker to modify customers and create orders without permission.

CPENameOperatorVersion
shopware/corele6.3.5.4
shopware/corelev6.2.3
shopware/corele6.4.8.1
shopware/platformle6.3.5.4
shopware/platformlev6.2.3
shopware/platformle6.4.8.1
shopware/administrationle6.4.8.1
shopware/administrationle6.3.5.4
shopware/corele6.3.5.4
shopware/corelev6.2.3

Name	Operator	Version
shopware/core	le	6.3.5.4
shopware/core	le	v6.2.3
shopware/core	le	6.4.8.1
shopware/platform	le	6.3.5.4
shopware/platform	le	v6.2.3
shopware/platform	le	6.4.8.1
shopware/administration	le	6.4.8.1
shopware/administration	le	6.3.5.4
shopware/core	le	6.3.5.4
shopware/core	le	v6.2.3