3 matches found
GHSA-5297-WRRP-RCJ7 Shopware Improper Session Handling in store-api account logout
Impact When a authentificated request is made to POST /store-api/account/logout, the cart will be cleared, but the User won't be logged out. This affects only the direct store-api usage, as the PHP Storefront listens additionally on CustomerLogoutEvent and invalidates the session additionally...
5.3CVSS5.2AI score0.00499EPSS
SaveExploits0References5
20