CVE-2021-37707

CVE-2021-37707 affects Shopware Open Source (Shopware Platform). Versions prior to 6.4.3.1 are vulnerable to manipulation of product reviews via the API. A patch is available in version 6.4.3.1. For older branches (6.1–6.3), security measures are available via a plugin/workaround. The GHSA adviso...

CVE-2021-37707 Manipulation of product reviews via API

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulation of product reviews via API. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a...