| Package | Affected versions | Patched versions |
|---|---|---|
| shopware/core | ≥ 6.0.0, < 6.2.3 | 6.2.3 |
| shopware/platform | ≥ 6.0.0, < 6.2.3 | 6.2.3 |
| shopware | < 6.2.3 | 6.2.3 |
In Shopware 6 before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. This vulnerability does not affect the shopware 5 release branch (shopware/shopware on packagist).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free