| Package | Affected versions | Patched versions |
|---|---|---|
| shopware/platform | < 6.2.3 | 6.2.3 |
| shopware | < 6.2.3 | 6.2.3 |
Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free