Servers and applications
CVE-2024-42356
Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the `context` variable is injected into almost any Twig Template and allows to access to current language, currency information. The context object allows also to switch for a short time the scope of the Context as a helper with a callable function. The function can be called also from Twig and as the second parameter…
- Severity
- High 7.2
- Published
- 8 Aug 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.5.8.13, 6.6.5.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ShopwareServers and applications · cpe:a:shopware:shopware |
|