Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/01/20 6:0 a.m.22 views

Information Disclosure

shopware/core is vulnerable to Information Disclosure. The vulnerability exists because the handle function of SendMailAction.php does not properly hide the password reset email of customers and admin users in logs, allowing an attacker to gain sensitive information if they have access to a centr...

6.5CVSS6.3AI score0.00705EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder