Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-18357
4
MEDIUMCVSS v2
Published
January 15, 2019
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.
shopware/shopware
PackagistShopware 5 is an open source e-commerce software made in Germany
PackagistShopware 5 is an open source e-commerce software made in Germany< 5.3.4NVD
GitHub