| Package | Affected versions | Patched versions |
|---|---|---|
| shopware/core | < 6.4.10.1 | 6.4.10.1 |
| shopware/platform | < 6.4.10.1 | 6.4.10.1 |
| shopware | < 6.4.10.1 | 6.4.10.1 |
The attacker can abuse the Admin SDK functionality on the server to read or update internal resources.
We recommend updating to the current version 6.4.10.1. You can get the update to 6.4.10.1 regularly via the Auto-Updater or directly via the download overview.
https://www.shopware.com/en/download/#shopware-6
For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free