Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/09 3:37 p.m.16 views

CVE-2025-32378 Shopware's default newsletter opt-in settings allow for mass sign-up abuse

Shopware is an open source e-commerce software platform. Prior to 6.6.10.3 or 6.5.8.17, the default settings for double-opt-in allow for mass unsolicited newsletter sign-ups without confirmation. Default settings are Newsletter: Double Opt-in set to active, Newsletter: Double opt-in for registere...

6.9CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder