CVE-2021-37711

Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

PT-2021-21829

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 6.4.3.1 Description The issue is related to an authenticated server-side request forgery vulnerability in file upload via URL. This vulnerability can be exploited in versions prior to 6.4.3.1. Recommendations For...

CVE-2021-37711: Server-Side Request Forgery (SSRF)

Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...