Cross-Site Scripting Vulnerability in Shopware by Shopware AG
CVE-2022-48150

6.1MEDIUM

Key Information:

Vendor

Shopware

Status
Shopware
Vendor
CVE Published:
21 April 2023

Badges

👾 Exploit Exists

What is CVE-2022-48150?

Shopware v5.5.10 is susceptible to a cross-site scripting (XSS) vulnerability, which can be exploited via the recovery/install/ URI. This weakness can allow attackers to inject malicious scripts into the web application, potentially compromising user data and security. Organizations using affected versions are encouraged to implement security measures to mitigate the risks associated with this vulnerability.

References

https://github.com/sahilop123/-CVE-2022-48150

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.