Junglewise Threat Intelligence

CVE-2022-24745: Shopware guest session is shared between customers

CVE-2022-24745 · Severity: low · CVSS 3.1 · Published 2022-03-10

Technologies: shopware/platform (Packagist), shopware/storefront (Packagist). Vendors: Packagist.

Executive brief

Shopware guest session is shared between customers

Affected products

  • Packagist shopware/platform
  • Packagist shopware/storefront

Related threats