Junglewise Threat Intelligence

CVE-2021-37711: Authenticated server-side request forgery in file upload via URL.

CVE-2021-37711 · Severity: low · CVSS 3.1 · Published 2021-08-23

Technologies: shopware/core (Packagist), shopware/platform (Packagist). Vendors: Packagist.

Executive brief

Authenticated server-side request forgery in file upload via URL.

Affected products

  • Packagist shopware/core
  • Packagist shopware/platform

Related threats