https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:22:04.070532+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42137 EUVD-2026-42137 2026-10-23T04:22:04.128360+00:00 EUVD-2026-42137 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13970 fkie_cve-2020-13970 2026-10-23T04:22:04.128394+00:00

Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.

 https://cve.radiocsirt.org/vuln/ghsa-5vmg-x99g-396q GHSA-5vmg-x99g-396q — Shopware vulnerable to SSRF 2026-10-23T04:22:04.128428+00:00

Affected: Packagist: shopware/platform

Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.

 https://cve.radiocsirt.org/vuln/gsd-2020-13970 gsd-2020-13970 2026-10-23T04:22:04.128452+00:00 gsd-2020-13970