6 matches found
CVE-2026-49191: Improper Authentication
The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages...
EUVD-2022-5089
Malicious code in bioql PyPI...
CVE-2020-13997
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...
CVE-2020-13997
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...
PT-2020-13826
Name of the Vulnerable Software and Affected Versions Shopware versions prior to 6.2.3 Description The database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. This issue does not affect the Shopware 5 release branch...
CVE-2020-13997: Generation of Error Message Containing Sensitive Information
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...