https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:09:28 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-03218 cnvd-2022-03218 https://cve.radiocsirt.org/vuln/cnvd-2022-03218 https://cve.radiocsirt.org/vuln/euvd-2026-234536 EUVD-2026-234536 https://cve.radiocsirt.org/vuln/euvd-2026-234536 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21652 <p>Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user session in the event of a password change. With version 5.7.7 the session validation was adjusted, so that sessions created prior to the latest password change of a customer account can&#39;t be used to login with said account. This also means, that upon a password change, all existing sessions for a given customer account are automatically considered invalid. There is no workaround for this issue.</p> <p>Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user session in the event of a password change. With version 5.7.7 the session validation was adjusted, so that sessions created prior to the latest password change of a customer account can&#39;t be used to login with said account. This also means, that upon a password change, all existing sessions for a given customer account are automatically considered invalid. There is no workaround for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21652 https://cve.radiocsirt.org/vuln/ghsa-p523-jrph-qjc6 <p><strong>Affected:</strong> Packagist: shopware/shopware</p> <p>### Impact</p> <p>Automatically invalidate sessions upon password change</p> <p>### Patches</p> <p>We recommend updating to the current version 5.7.7. You can get the update to 5.7.7 regularly via the Auto-Updater or directly via the download overview.</p> <p>For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html</p> <p>### References</p> <p>https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022</p> <p><strong>Affected:</strong> Packagist: shopware/shopware</p> <p>### Impact</p> <p>Automatically invalidate sessions upon password change</p> <p>### Patches</p> <p>We recommend updating to the current version 5.7.7. You can get the update to 5.7.7 regularly via the Auto-Updater or directly via the download overview.</p> <p>For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html</p> <p>### References</p> <p>https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022</p> https://cve.radiocsirt.org/vuln/ghsa-p523-jrph-qjc6 https://cve.radiocsirt.org/vuln/gsd-2022-21652 gsd-2022-21652 https://cve.radiocsirt.org/vuln/gsd-2022-21652