CVE-2021-32712: shopware

csirt@kutim:~/threat-intel/cve/CVE-2021-32712

CVSS 5.3 · Medium EPSS 1,1%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada shopware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in error handling. Users are recommend to update to version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

Rincian

Terbit di NVD: 24 Juni 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-209: Generation of Error Message Containing Sensitive Information
EPSS (30 hari): 1,1% peluang dieksploitasi; lebih tinggi dari 65,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
shopware	shopware	Versi 5.0.0 hingga sebelum 5.6.10

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021 advisory vendor
https://github.com/shopware/shopware/commit/dcb24eb5ec757c991b5a4e2ddced379e5820744d patch · advisory pihak ketiga
https://github.com/shopware/shopware/security/advisories/GHSA-9vxv-wpv4-f52p advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.