Lucene search
+L

3 matches found

OSV
OSV
added 2024/04/08 3:48 p.m.16 views

GHSA-5297-WRRP-RCJ7 Shopware Improper Session Handling in store-api account logout

Impact When a authentificated request is made to POST /store-api/account/logout, the cart will be cleared, but the User won't be logged out. This affects only the direct store-api usage, as the PHP Storefront listens additionally on CustomerLogoutEvent and invalidates the session additionally...

5.3CVSS5.2AI score0.00499EPSS
SaveExploits0References5
Rows per page
Query Builder