1 matches found
Access Control Bypass
Shopware is vulnerable to Access Control Bypass. The vulnerability is due to improper handling of ManyToManyAssociationField in the Criteria processing via SalesChannelRepository.php, which allows attackers to bypass protections and potentially access or manipulate data through extensions...
5.9CVSS6.8AI score0.00429EPSS
SaveExploits0References5Affected Software2
20