Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/04/08 3:48 p.m.32 views

Shopware Improper Session Handling in store-api account logout

Impact When a authentificated request is made to POST /store-api/account/logout, the cart will be cleared, but the User won't be logged out. This affects only the direct store-api usage, as the PHP Storefront listens additionally on CustomerLogoutEvent and invalidates the session additionally...

5.3CVSS7AI score0.00499EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder