Shopware Broken ACL on Document retrieval to access other customers documents

🗓️ 08 Apr 2025 16:33:30Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 7 Views

Possible access to other customers' documents due to broken ACL in Shopware document retrieval.

Vulners

Node

shopware platformRange<6.5.8.17composer

shopware coreRange<6.5.8.17composer

shopware platformRange6.7.0.0-rc1–6.7.0.0-rc2composer

shopware coreRange6.7.0.0-rc1–6.7.0.0-rc2composer

shopware platformRange6.6.0.0–6.6.10.3composer

shopware coreRange6.6.0.0–6.6.10.3composer

Source	Link
github	www.github.com/shopware/shopware/security/advisories/GHSA-68wv-g3fw-pq7q
github	www.github.com/shopware/shopware/releases/tag/v6.5.8.17
github	www.github.com/shopware/shopware/releases/tag/v6.6.10.3
github	www.github.com/shopware/shopware/releases/tag/v6.7.0.0-rc2
github	www.github.com/advisories/GHSA-68wv-g3fw-pq7q

08 Apr 2025 16:33Current

7.1High risk

Vulners AI Score7.1