Lucene search
Veracode Vulnerability DatabaseVERACODE:34597HistoryMar 10, 2022 - 7:35 a.m.
Information Disclosure
2022-03-1007:35:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
30.8%
shopware/platform is vulnerable to information exposure. The vulnerability exists due to a lack of sanitization in HTTP headers in the CacheResponseSubscriber function in the CacheResponseSubscriber.php file, allowing to read sensitive information in the system via caches
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware/platform | le | 6.4.8.1 | |
| shopware/storefront | le | 6.4.8.1 | |
| shopware/platform | le | 6.4.8.1 | |
| shopware/storefront | le | 6.4.8.1 |
References
Related
cve
cve
CVE-2022-24747
2022-03-09 23:15:08
cvelist
cvelist
CVE-2022-24747 HTTP caching is marking private HTTP headers as public
2022-03-09 22:25:16
prion
prion
Design/Logic Flaw
2022-03-09 23:15:00
nvd
nvd
CVE-2022-24747
2022-03-09 23:15:08
osv
osv
HTTP caching is marking private HTTP headers as public in Shopware
2022-03-10 17:55:21
CVE-2022-24747
2022-03-09 23:15:00
cnvd
cnvd
Shopware Information Disclosure Vulnerability (CNVD-2022-18524)
2022-03-11 00:00:00
github
github
HTTP caching is marking private HTTP headers as public in Shopware
2022-03-10 17:55:21