Beveiligingsadvies

CVE-2022-24892

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-28 14:20:12

Laatst bijgewerkt 2025-04-23 18:31:35

Toegewezen door GitHub_M

CVSS-score 6.4

Status PUBLISHED

Beschrijving

Shopware is an open source e-commerce software platform. Starting with version 5.0.4 and before version 5.7.9, multiple tokens for password reset can be requested. All tokens can be used to change the password. This makes it possible for an attacker to take over the victim's account if they somehow gain access to the victims email account and find an unused password reset token in the emails. This issue is fixed in version 5.7.9.

← Alle CVE's bekijken Bekijk op cve.org ↗