Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-13997

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r4ph-mx67-x58p

Shopware database password is leaked to an unauthenticated users In Shopware 6 before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. This vulnerability does not affect the shopware 5 release branch (`shopware/shopware` on packagist).

gitlab/packagist/shopware/core/CVE-2020-13997

Information Exposure Through an Error Message In Shopware, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.

gitlab/packagist/shopware/platform/CVE-2020-13997

Information Exposure Through an Error Message In Shopware, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.

gitlab/packagist/shopware/shopware/CVE-2020-13997

Insufficiently Protected Credentials In Shopware, the database password is leaked to an unauthenticated user when a `DriverException` occurs and verbose error handling is enabled.