Home > Vulnerability Database > CVE-2023-22730

Mend.io Vulnerability Database

CVE-2023-22730

Date: January 17, 2023

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple times in the cart using the AP. The Cart Validators checked the line item's individuality and the user was able to bypass quantity limits in sales. This problem has been fixed with version 6.4.18.1. Users on major versions 6.1, 6.2, and 6.3 may also obtain this fix via a plugin.

Language: PHP

Severity Score

5.3

Related Resources (6)

Url: https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-22730

Url: https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fg

Url: https://github.com/shopware/platform

Url: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates

Url: https://www.mend.io/vulnerability-database/CVE-2023-22730

Severity Score

5.3

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

Mend.io Vulnerability Database

We found results for “”

CVE-2023-22730

Date: January 17, 2023

Language: PHP

Severity Score

Related Resources (6)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?