CVE-2021-32709

    Dashboard / Vulnerabilities / CVE-2021-32709

    CVE-2021-32709

    Published: 24 Jun 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Shopware is an open source eCommerce platform. Creation of order credits was not validated by ACL in admin orders. Users are recommend to update to the current version 6.4.1.1. You can get the update to 6.4.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

    References: https://github.com/shopware/platform/security/advisories/GHSA-g7w8-pp9w-7p32

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -5940dfe864da0bcf694534f560820d4a5df2f8b9

    Affected versions

    v6.4.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32709 | CVE-DB