131 matches found
PT-2021-24451
Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.3.5.3 Description: The issue involves a leak of information via the Store-API. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...
Leak of information via Store-API
Impact Leak of information via Store-API Patches We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 The vulnerability could only be fixed by...
GHSA-F2VV-H5X4-57GR Leak of information via Store-API
Impact Leak of information via Store-API Patches We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 The vulnerability could only be fixed by...
PT-2021-19877
Name of the Vulnerable Software and Affected Versions Shopware versions prior to 6.3.5.1 Description The issue is related to a leak of information via the Store-API. This could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-A...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
Sql injection
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
CVE-2019-15569
Summary (CVE-2019-15569): HM Courts & Tribunals CCD data-store-api prior to 2019-06-10 is vulnerable to SQL injection, as reported in multiple sources. The issue affects the data-store API’s query handling, specifically related to SearchQueryFactoryOperation.java and SortDirection.java, allowing ...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
PT-2019-14285
Name of the Vulnerable Software and Affected Versions HM Courts & Tribunals ccd-data-store-api versions prior to 2019-06-10 Description The issue allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java. Recommendations For versions prior to 2019-06-10, update to a...
CVE-2019-15569: Improper Neutralization of Special Elements used in an SQL Command
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...