Known vulnerabilities in Shopware 6.4.8.0

Vendor: Shopware
Software: Shopware
Version: 6.4.8.0
Software CPE: cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Shopware version 6.4.8.0 Shopware 6.4.8.0 is affected by 7 vulnerabilities: 2 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131883 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2023-2017
CWE-1336 Medium
No
No
6.4.20.1 17.04.2023 SB2020112321
#VU131888 - Improper input validation
CVE-2023-22734
CWE-20 Medium
No
No
6.4.18.1 17.01.2023 SB2023011794
#VU131887 - Improper Output Neutralization for Logs
CVE-2023-22733
CWE-117 Low
No
No
6.4.18.1 17.01.2023 SB2023011794
#VU131886 - Insufficient Session Expiration
CVE-2023-22732
CWE-613 Medium
No
No
6.4.18.1 17.01.2023 SB2023011794
#VU131885 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-22731
CWE-94 High
No
No
6.4.18.1 17.01.2023 SB2023011794
#VU131884 - Improper input validation
CVE-2023-22730
CWE-20 Low
No
No
6.4.18.1 17.01.2023 SB2023011794
#VU131889 - Improper Access Control
CVE-2022-24745
CWE-284 High
No
No
6.4.8.2 09.03.2022 SB2022030940