1. Home
  2. CVE Database
  3. CVE-2022-24744
LOW · 2.6

CVE-2022-24744

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password r...

Vulnerability Description

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.

CVSS Score

2.6

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ShopwareShopware< 6.4.8.1

Related Weaknesses (CWE)

CWE-613

References

FAQ

What is CVE-2022-24744?

CVE-2022-24744 is a vulnerability with a CVSS score of 2.6 (LOW). Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password r...

How severe is CVE-2022-24744?

CVE-2022-24744 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24744?

Check the references section above for vendor advisories and patch information. Affected products include: Shopware Shopware.