3 matches found
Shopware Improper Session Handling in store-api account logout
Impact When a authentificated request is made to POST /store-api/account/logout, the cart will be cleared, but the User won't be logged out. This affects only the direct store-api usage, as the PHP Storefront listens additionally on CustomerLogoutEvent and invalidates the session additionally...
5.3CVSS7AI score0.00499EPSS
SaveExploits0References5Affected Software2
20