All vulnerabilities

Servers and applications

CVE-2023-34099

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7.18 and users are advised to update. There are no known workarounds for this vulnerability.

Severity
Medium 5.3
Published
27 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ShopwareServers and applications · cpe:a:shopware:shopware
  • From 5.1.4 up to 5.7.17

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-34099
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-34099