cvedb.io
CVE-2021-32711
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2021-06-24T20:15:09.127 · Last modified 2026-06-17T03:53:28.587

Summary

Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API should be affected by this change. We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/#shopware-6 The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API should be affected by this change. Please check your plugins if you have it in use. Detailed technical information can be found in the upgrade informat

Affected products

shopware — shopware

Does this affect you?

Add your gear to cvedb and we'll alert you only when shopware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.