Vulnerability Details CVE-2022-21651
Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may be arbitrary redirected due to incomplete URL handling in the shopware router. This issue has been resolved in version 5.7.7. There is no workaround and users are advised to upgrade as soon as possible.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.5%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 5.8
References
- https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022
- https://github.com/shopware/shopware/commit/a90046c765c57a46c4399dce17bd174253c32886
- https://github.com/shopware/shopware/security/advisories/GHSA-c53v-qmrx-93hg
- https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022
- https://github.com/shopware/shopware/commit/a90046c765c57a46c4399dce17bd174253c32886
- https://github.com/shopware/shopware/security/advisories/GHSA-c53v-qmrx-93hg
Products affected by CVE-2022-21651
-
cpe:2.3:a:shopware:shopware:5.0.0
-
cpe:2.3:a:shopware:shopware:5.0.1
-
cpe:2.3:a:shopware:shopware:5.0.2
-
cpe:2.3:a:shopware:shopware:5.0.3
-
cpe:2.3:a:shopware:shopware:5.0.4
-
cpe:2.3:a:shopware:shopware:5.1.0
-
cpe:2.3:a:shopware:shopware:5.1.1
-
cpe:2.3:a:shopware:shopware:5.1.2
-
cpe:2.3:a:shopware:shopware:5.1.3
-
cpe:2.3:a:shopware:shopware:5.1.4
-
cpe:2.3:a:shopware:shopware:5.1.5
-
cpe:2.3:a:shopware:shopware:5.1.6
-
cpe:2.3:a:shopware:shopware:5.2.0
-
cpe:2.3:a:shopware:shopware:5.2.1
-
cpe:2.3:a:shopware:shopware:5.2.10
-
cpe:2.3:a:shopware:shopware:5.2.11
-
cpe:2.3:a:shopware:shopware:5.2.12
-
cpe:2.3:a:shopware:shopware:5.2.13
-
cpe:2.3:a:shopware:shopware:5.2.14
-
cpe:2.3:a:shopware:shopware:5.2.15
-
cpe:2.3:a:shopware:shopware:5.2.16
-
cpe:2.3:a:shopware:shopware:5.2.17
-
cpe:2.3:a:shopware:shopware:5.2.18
-
cpe:2.3:a:shopware:shopware:5.2.19
-
cpe:2.3:a:shopware:shopware:5.2.2
-
cpe:2.3:a:shopware:shopware:5.2.20
-
cpe:2.3:a:shopware:shopware:5.2.21
-
cpe:2.3:a:shopware:shopware:5.2.22
-
cpe:2.3:a:shopware:shopware:5.2.23
-
cpe:2.3:a:shopware:shopware:5.2.24
-
cpe:2.3:a:shopware:shopware:5.2.25
-
cpe:2.3:a:shopware:shopware:5.2.26
-
cpe:2.3:a:shopware:shopware:5.2.27
-
cpe:2.3:a:shopware:shopware:5.2.3
-
cpe:2.3:a:shopware:shopware:5.2.4
-
cpe:2.3:a:shopware:shopware:5.2.5
-
cpe:2.3:a:shopware:shopware:5.2.6
-
cpe:2.3:a:shopware:shopware:5.2.7
-
cpe:2.3:a:shopware:shopware:5.2.8
-
cpe:2.3:a:shopware:shopware:5.2.9
-
cpe:2.3:a:shopware:shopware:5.3.0
-
cpe:2.3:a:shopware:shopware:5.3.1
-
cpe:2.3:a:shopware:shopware:5.3.2
-
cpe:2.3:a:shopware:shopware:5.3.3
-
cpe:2.3:a:shopware:shopware:5.3.4
-
cpe:2.3:a:shopware:shopware:5.3.5
-
cpe:2.3:a:shopware:shopware:5.3.6
-
cpe:2.3:a:shopware:shopware:5.3.7
-
cpe:2.3:a:shopware:shopware:5.4.0
-
cpe:2.3:a:shopware:shopware:5.4.1
-
cpe:2.3:a:shopware:shopware:5.4.2
-
cpe:2.3:a:shopware:shopware:5.4.3
-
cpe:2.3:a:shopware:shopware:5.4.4
-
cpe:2.3:a:shopware:shopware:5.4.5
-
cpe:2.3:a:shopware:shopware:5.4.6
-
cpe:2.3:a:shopware:shopware:5.5.0
-
cpe:2.3:a:shopware:shopware:5.5.1
-
cpe:2.3:a:shopware:shopware:5.5.10
-
cpe:2.3:a:shopware:shopware:5.5.2
-
cpe:2.3:a:shopware:shopware:5.5.3
-
cpe:2.3:a:shopware:shopware:5.5.4
-
cpe:2.3:a:shopware:shopware:5.5.5
-
cpe:2.3:a:shopware:shopware:5.5.6
-
cpe:2.3:a:shopware:shopware:5.5.7
-
cpe:2.3:a:shopware:shopware:5.5.8
-
cpe:2.3:a:shopware:shopware:5.5.9
-
cpe:2.3:a:shopware:shopware:5.6.0
-
cpe:2.3:a:shopware:shopware:5.6.1
-
cpe:2.3:a:shopware:shopware:5.6.10
-
cpe:2.3:a:shopware:shopware:5.6.2
-
cpe:2.3:a:shopware:shopware:5.6.3
-
cpe:2.3:a:shopware:shopware:5.6.4
-
cpe:2.3:a:shopware:shopware:5.6.5
-
cpe:2.3:a:shopware:shopware:5.6.6
-
cpe:2.3:a:shopware:shopware:5.6.7
-
cpe:2.3:a:shopware:shopware:5.6.8
-
cpe:2.3:a:shopware:shopware:5.6.9
-
cpe:2.3:a:shopware:shopware:5.7.0
-
cpe:2.3:a:shopware:shopware:5.7.1
-
cpe:2.3:a:shopware:shopware:5.7.2
-
cpe:2.3:a:shopware:shopware:5.7.3
-
cpe:2.3:a:shopware:shopware:5.7.4
-
cpe:2.3:a:shopware:shopware:5.7.5
-
cpe:2.3:a:shopware:shopware:5.7.6