CVE-2020-13970

CVE-2020-13970 affects Shopware prior to 6.2.3 and describes a Server-Side Request Forgery (SSRF) in the Mediabrowser upload by URL feature. An authenticated user can cause the Shopware server to issue HTTP, HTTPS, FTP, and SFTP requests on behalf of the platform, with impact on confidentiality, ...