All vulnerabilities

Servers and applications

CVE-2024-42356

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the `context` variable is injected into almost any Twig Template and allows to access to current language, currency information. The context object allows also to switch for a short time the scope of the Context as a helper with a callable function. The function can be called also from Twig and as the second parameter…

Severity
High 7.2
Published
8 Aug 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.5.8.13, 6.6.5.1
Sources
NVD

Affected software

SoftwareAffected versions
ShopwareServers and applications · cpe:a:shopware:shopware
  • Every version before 6.5.8.13
  • From 6.6.0.0 before 6.6.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-42356
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-42356