CVE-2023-34099
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, allowing the construction of different email addresses that ultimately resulted in the same address shared by multiple accounts.
Risk Assessment
This vulnerability may lead to unauthorized access to user accounts, posing risks of data theft or fraud. Organizations should be aware of the potential security threats to accounts.
Recommendation
It is recommended to update to version 5.7.18 to mitigate this vulnerability. There are no known workarounds for this issue.
Original NVD description (English source)
Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7.18 and users are advised to update. There are no known workarounds for this vulnerability.