What is GHSA-8qxh-hcr9-2379?

GHSA-8qxh-hcr9-2379 is a security advisory published by GitHub Security Advisories with Medium severity. Shopware Cross-site Scripting Vulnerability

Which CVE IDs does GHSA-8qxh-hcr9-2379 cover?

GHSA-8qxh-hcr9-2379 covers the following CVE IDs: CVE-2019-12935. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8qxh-hcr9-2379?

GHSA-8qxh-hcr9-2379 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-8qxh-hcr9-2379?

GHSA-8qxh-hcr9-2379 affects 1 product, including: composer/shopware/shopware:\u003c 5.5.8.

GHSA-8qxh-hcr9-2379MediumCVSS 6.1

Shopware Cross-site Scripting Vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-12935 →

📋 Description

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.

🎯 Affected products1

composer/shopware/shopware:< 5.5.8

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2019-12935
https://www.netsparker.com/web-applications-advisories/ns-19-004-cross-site-scripting-in-shopware/
https://www.shopware.com/en/changelog/#5-5-8
http://seclists.org/fulldisclosure/2019/Jun/32
https://github.com/advisories/GHSA-8qxh-hcr9-2379