In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsLearn about Access Restriction Bypass vulnerabilities in an interactive lesson.
Start learningUpgrade shopware/core
to version 6.4.1.1 or higher.
shopware/core is a Shopware platform is the core for all Shopware ecommerce products.
Affected versions of this package are vulnerable to Access Restriction Bypass via canceling of orders not related to the logged-in user. This is because the API route for order cancellation does not check the customer scope.