Lucene search
PRIOn knowledge basePRION:CVE-2023-22732HistoryJan 17, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-01-1722:15:00
PRIOn knowledge base
www.prio-n.com
8
shopware
commerce platform
session expiration
symfony framework
vue js
administration
automatic logout
upgrade
security issue
Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one week, when an attacker has stolen the session cookie they could use it for a long period of time. In version 6.4.18.1 an automatic logout into the Administration session has been added. As a result the user will be logged out when they are inactive. Users are advised to upgrade. There are no known workarounds for this issue.
Related
cvelist
cvelist
CVE-2023-22732 Insufficient Session Expiration in Administration in shopware
2023-01-17 21:34:26
osv
osv
Shopware has Insufficient Session Expiration in Administration
2023-01-20 23:18:17
CVE-2023-22732
2023-01-17 22:15:11
veracode
veracode
Session Fixation
2023-01-20 05:11:28
github
github
Shopware has Insufficient Session Expiration in Administration
2023-01-20 23:18:17
nvd
nvd
CVE-2023-22732
2023-01-17 22:15:11
cve
cve
CVE-2023-22732
2023-01-17 22:15:11