Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2020-0022

Good to know:

icon

Date: February 11, 2020

in Shopware, versions v6.1.0 through v6.3.1.0 are vulnerable to Reflected Cross-Site Scripting (XSS) due to improper escaping in the search page of the Storefront

Language: JS

Severity Score

Related Resources (5)

https://github.com/shopware/platform/commit/6e10a3d6b5bba559cdddb5e04d917cbbd32086e2
https://github.com/advisories/GHSA-fw4p-36j9-rrj3
https://github.com/sequelize/sequelize/pull/11877
https://github.com/sequelize/sequelize
https://www.mend.io/vulnerability-database/WS-2020-0022

Severity Score

Weakness Type (CWE)

Uncontrolled Resource Consumption ('Resource Exhaustion')

CWE-400

Top Fix

icon

Upgrade Version

Upgrade to version sequelize - 4.44.4

Learn More

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE

Do you need more information?

Contact Us