GHSA-9vxv-wpv4-f52p Information leakage in Error Handler
An information leakage vulnerability in the Error Handler allows attackers to access sensitive data, requiring an upgrade to the latest version.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is GHSA-9vxv-wpv4-f52p?
GHSA-9vxv-wpv4-f52p is a vulnerability in shopware/shopware, published on 21 May 2021. It can be exploited over the network.
Official description
Impact
Information leakage in Error Handler
Patches
We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.
For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html
References
https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021
Which versions are affected by GHSA-9vxv-wpv4-f52p?
2 open source packages ship an affected version, including shopware/shopware.
| Package | Affected | Fixed in |
|---|---|---|
shopware/shopware Packagist | All versions | 5.6.10 |
shopware/shopware Packagist | All versions | 5.6.10 |
How do I fix GHSA-9vxv-wpv4-f52p?
Upgrade shopware/shopware to 5.6.10 or later.
Is GHSA-9vxv-wpv4-f52p being exploited?
There is no known exploitation of GHSA-9vxv-wpv4-f52p in the wild and no public exploit code.