netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-r4ph-mx67-x58p

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-08 18:35:36 +00:00
parent cdf2365acb
commit c3a178248b
1 changed files with 4 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-r4ph-mx67-x58p/GHSA-r4ph-mx67-x58p.json
+4 -23
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r4ph-mx67-x58p",
"modified": "2024-04-24T22:41:45Z",
"modified": "2024-07-08T18:34:12Z",
"published": "2022-05-24T17:24:28Z",
"aliases": [
"CVE-2020-13997"
],
"summary": "Shopware database password is leaked to an unauthenticated users",
"details": "In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.",
"details": "In Shopware 6 before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. This vulnerability does not affect the shopware 5 release branch (`shopware/shopware` on packagist).",
"severity": [
{
"type": "CVSS_V3",
@@ -25,26 +25,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.2.3"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "shopware/shopware"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "6.0.0"
},
{
"fixed": "6.2.3"
@@ -63,7 +44,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "6.0.0"
},
{
"fixed": "6.2.3"