1 matches found
Information Disclosure
shopware/core is vulnerable to Information Disclosure. The vulnerability exists because the handle function of SendMailAction.php does not properly hide the password reset email of customers and admin users in logs, allowing an attacker to gain sensitive information if they have access to a centr...
6.5CVSS6.3AI score0.00705EPSS
SaveExploits0References5Affected Software2
20