UpHeron
All vulnerabilities

Servers and applications

CVE-2023-22730

Improper Input Validation of Clearance sale in cart

Severity
High 7.5
Published
17 Jan 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.4.18.1
Also known as
GHSA-8r6h-m72v-38fg
Sources
NVD, Project advisories (GitHub)

Description

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple times in the cart using the AP. The Cart Validators checked the line item's individuality and the user was able to bypass quantity limits in sales. This problem has been fixed with version 6.4.18.1. Users on major versions 6.1, 6.2, and 6.3…

Affected software

SoftwareAffected versions
ShopwareServers and applications · cpe:a:shopware:shopware
  • Every version before 6.4.18.1
ShopwareServers and applications · github:shopware/shopware
  • Every version before 6.4.18.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22730
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22730
  • GitHub Advisory Database https://github.com/advisories/GHSA-8r6h-m72v-38fg
  • github.com https://github.com/shopware/shopware/security/advisories/GHSA-8r6h-m72v-38fg