CVE-2024-31447

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 8, 2024
CWE ID 613

Summary

CVE-2024-31447 is a vulnerability that affects Shopware 6, an open commerce platform based on Symfony Framework and Vue. The vulnerability occurs in versions 6.3.5.0 to 6.6.1.0 and 6.5.8.8, where an authenticated request made to POST /store-api/account/logout will clear the cart but not log out the user. This vulnerability only affects direct store-api usage, as the PHP Storefront invalidates the session additionally. The issue has been fixed in versions 6.6.1.0 and 6.5.8.8, but for those unable to update, installing the latest version of the Shopware Security Plugin is recommended as a workaround.

Note: The source text does not provide information about the potential danger this vulnerability poses or how to remediate it beyond updating or installing the security plugin, so these details are not included in the summary above.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-31447 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options