UpHeron
All vulnerabilities

Servers and applications

CVE-2021-32711

Leak of information via Store-API

Severity
High 7.5
Published
8 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.3.5.1
Also known as
GHSA-f2vv-h5x4-57gr
Sources
NVD, Project advisories (GitHub)

Description

Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API should be affected by this change. We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via…

Affected software

SoftwareAffected versions
ShopwareServers and applications · cpe:a:shopware:shopware
  • Every version before 6.3.5.1
ShopwareServers and applications · github:shopware/shopware
  • Every version before 6.3.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-32711
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-32711
  • GitHub Advisory Database https://github.com/advisories/GHSA-f2vv-h5x4-57gr
  • github.com https://github.com/shopware/shopware/security/advisories/GHSA-f2vv-h5x4-57gr