CVE-2022-24744

Katalog CVE

CVSS 3.5 · Low EPSS 0,49%

Kerentanan Insufficient Session Expiration pada shopware. Skor CVSS 3.1 3.5 (Low) menurut NVD.

Deskripsi (NVD)

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.

Rincian

Terbit di NVD

9 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.5 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-613: Insufficient Session Expiration

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555 patch · advisory pihak ketiga