One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 4252453 |
| Date de publication | 2022-03-09 23:15:08 (vue: 2022-03-10 02:06:02) |
| Titre | CVE-2022-24748 |
| Texte | Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions prior to 6.4.8.2 it is possible to modify customers and to create orders without App Permission. This issue is a result of improper api route checking. Users are advised to upgrade to version 6.4.8.2. There are no known workarounds. |
| Envoyé | Oui |
| Condensat | 2022 24748 advised api app are based checking commerce create customers cve framework improper issue javascript known modify open orders permission php platform possible prior result route shopware symfony upgrade users version versions vue without workarounds |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.