Junglewise Threat Intelligence

CVE-2024-22407: Broken Access Control order API in Shopware

CVE-2024-22407 · Severity: low · CVSS 3.1 · Published 2024-01-17

Technologies: shopware/core (Packagist), shopware/platform (Packagist). Vendors: Packagist.

Executive brief

Broken Access Control order API in Shopware

Affected products

  • Packagist shopware/core
  • Packagist shopware/platform

Related threats