CVE-2021-32710CWE-384

Potential Session Hijacking in Shopware

Medium · published June 24, 2021

CVSS v3.1
5.9
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Shopware is an open source eCommerce platform. Potential session hijacking of store customers in versions below 6.3.5.2. We recommend to update to the current version 6.3.5.2. You can get the update to 6.3.5.2 regularly via the Auto-Updater or directly via the download overview. For older versions of 6.1 and 6.2, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.7th percentile
Weakness
CWE-384 · Session Fixation
Published
2021-06-24T19:45Z
EPSS history
Timeline
  • 24 JUN 19:45Z
    Potential Session Hijacking in Shopware
    cvelistv5